Scientific Linux: Low SELinux-Policy Enhancement Update Errata 08-50-55

Date:         Tue, 11 Sep 2012 08:47:10 -0500
Reply-To:     Pat Riehecky 
Sender:       Security Errata for Scientific Linux
              
From:         Pat Riehecky 
Organization: Fermilab
Subject:      FASTBUGS for SL 5x i386, x86_64 now available
MIME-Version: 1.0

The following FASTBUGS have been uploaded to


i386:
cyrus-sasl-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-devel-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-gssapi-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-ldap-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-lib-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-md5-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-ntlm-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-plain-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-sql-2.1.22-7.el5_8.1.i386.rpm
gimp-2.2.13-2.0.10.el5.i386.rpm
gimp-devel-2.2.13-2.0.10.el5.i386.rpm
gimp-libs-2.2.13-2.0.10.el5.i386.rpm
gnome-session-2.16.0-10.el5.i386.rpm
ipsec-tools-0.6.5-14.el5_8.5.i386.rpm
logwatch-7.3-10.el5.noarch.rpm
rgmanager-2.0.52-28.el5_8.4.i386.rpm
sysstat-7.0.2-12.el5.i386.rpm


x86_64:
cyrus-sasl-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-2.1.22-7.el5_8.1.x86_64.rpm
cyrus-sasl-devel-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-devel-2.1.22-7.el5_8.1.x86_64.rpm
cyrus-sasl-gssapi-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-gssapi-2.1.22-7.el5_8.1.x86_64.rpm
cyrus-sasl-ldap-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-ldap-2.1.22-7.el5_8.1.x86_64.rpm
cyrus-sasl-lib-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-lib-2.1.22-7.el5_8.1.x86_64.rpm
cyrus-sasl-md5-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-md5-2.1.22-7.el5_8.1.x86_64.rpm
cyrus-sasl-ntlm-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-ntlm-2.1.22-7.el5_8.1.x86_64.rpm
cyrus-sasl-plain-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-plain-2.1.22-7.el5_8.1.x86_64.rpm
cyrus-sasl-sql-2.1.22-7.el5_8.1.i386.rpm
cyrus-sasl-sql-2.1.22-7.el5_8.1.x86_64.rpm
gimp-2.2.13-2.0.10.el5.x86_64.rpm
gimp-devel-2.2.13-2.0.10.el5.i386.rpm
gimp-devel-2.2.13-2.0.10.el5.x86_64.rpm
gimp-libs-2.2.13-2.0.10.el5.i386.rpm
gimp-libs-2.2.13-2.0.10.el5.x86_64.rpm
gnome-session-2.16.0-10.el5.x86_64.rpm
ipsec-tools-0.6.5-14.el5_8.5.x86_64.rpm
logwatch-7.3-10.el5.noarch.rpm
rgmanager-2.0.52-28.el5_8.4.x86_64.rpm
sysstat-7.0.2-12.el5.x86_64.rpm
Date:         Tue, 11 Sep 2012 08:50:55 -0500
Reply-To:     Pat Riehecky 
Sender:       Security Errata for Scientific Linux
              
From:         Pat Riehecky 
Organization: Fermilab
Subject:      Security ERRATA Low: selinux-policy enhancement update on SL5.x,
              SL6.x i386/x86_64
MIME-Version: 1.0

Synopsis: Low: selinux-policy enhancement update
Issue date: 2012-09-11

This update adds the following enhancements:


* Previously, with the MLS policy activated, a user created with a MLS 
level was
not able to log into the system using the ssh utility because an 
appropriate MLS
policy rule was missing. This update adds the MLS rule and users can now log
into the system as expected in the described scenario.

* When OpenMPI (Open Message Passing Interface) was configured to use the
parallel universe environment in the Condor server, a large number of AVC
messages was returned when an OpenMPI job was submitted. Consequently, 
the job
failed. This update fixes the appropriate SELinux policy and OpenMPI 
jobs now
pass successfully and no longer cause AVC messages to be returned.

This update has been placed in the security tree to avoid selinux bugs.


SL6.x

SRPMS:

selinux-policy-3.7.19-155.el6_3.4.src.rpm

i386:

selinux-policy-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-doc-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-minimum-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-mls-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-targeted-3.7.19-155.el6_3.4.noarch.rpm


x86_64:

selinux-policy-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-doc-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-minimum-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-mls-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-targeted-3.7.19-155.el6_3.4.noarch.rpm