Detections
Analytics
Scientific Linux Security Update : selinux-policy enhancement update on SL6.x i386/x86_64 (20131104)
high Nessus Plugin ID 70757
Language:
Synopsis
The remote Scientific Linux host is missing one or more security updates.Description
This update adds the following enhancements :- Previously, the pacemaker resource manager did not have its own policy defined and started in the initrc_t domain. With this update, the wrong context has been fixed and proper permissions have been set for pacemaker, thus fixing the bug.
- Previously, the SELinux policy prevented running virtual machines based on volumes under the VDSM's deamon directory, /var/run/vdsm/storage/. As a consequence, trying to a run virtual machine with these settings resulted in an error. This update fixes the ability of the svirt_t SELinux process domain to read symbolic links in the /var/run/ directory, and now virtual machines based on volumes can be used under the VDSM's daemon directory.
- Previously, due to SELinux permission errors, trying to run a QEMU process using the libvirt library resulted in and error and the process being terminated. This bug has now been fixed, and QEMU processes start and run successfully in this scenario.
This update has been placed in the security tree to avoid selinux related problems.
Solution
Update the affected packages.See Also
Plugin Details
Severity: High
ID: 70757
File Name: sl_20131104_selinux_policy_enhancement_update_on_SL6_x.nasl
Version: 1.5
Type: local
Agent: unix
Published: 11/5/2013
Updated: 1/14/2021
Supported Sensors: Nessus Agent, Nessus
Vulnerability Information
CPE: p-cpe:/a:fermilab:scientific_linux:selinux-policy, p-cpe:/a:fermilab:scientific_linux:selinux-policy-doc, p-cpe:/a:fermilab:scientific_linux:selinux-policy-minimum, p-cpe:/a:fermilab:scientific_linux:selinux-policy-mls, p-cpe:/a:fermilab:scientific_linux:selinux-policy-targeted, x-cpe:/o:fermilab:scientific_linux
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Patch Publication Date: 11/4/2013
Vulnerability Publication Date: 11/4/2013