VulnerabilityPublished 17 Dec 2020Updated 21 Nov 2025

Red Hat Security Advisory: fapolicyd bug fix update

Affects Red Hat fapolicydSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 14 Nov 2026, 17:49 UTC

What to do

AI-suggested

Apply the updated fapolicyd package containing the fix that ignores the " (deleted)" suffix in binary paths to ensure proper enforcement of file access policies and successful system updates. This fix has been released previously and is reissued to ensure visibility. No additional security actions are required as this is not a security vulnerability.

Description

A bug in the fapolicyd file access control daemon caused it to treat updated running application binaries with a " (deleted)" suffix as untrusted, preventing them from opening or executing files. This behavior could cause systems to fail to boot after applying updates. The issue was fixed by modifying fapolicyd to ignore the suffix and correctly match binaries to the trust database. This update does not introduce any new security fixes but addresses a high-impact bug affecting system availability.

Impact

Systems running fapolicyd could become unbootable after applying updates due to the daemon blocking access for updated binaries marked with the " (deleted)" suffix. This impacts system availability and update reliability but does not represent a security vulnerability or risk of unauthorized access.

Summary

The fapolicyd framework enforces file access control based on user-defined policies to prevent execution of untrusted applications. A bug caused fapolicyd to misclassify running application binaries that had been replaced during an update and marked with a " (deleted)" suffix by the kernel. This misclassification led fapolicyd to block these binaries from accessing files, sometimes resulting in systems being unable to boot after updates. The fix ensures fapolicyd ignores the " (deleted)" suffix in binary paths, allowing proper trust matching and update completion. This fix was previously released but is reissued for visibility; it does not address a security vulnerability but a functional bug.

References

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 14 Nov 2026, 17:49 UTC

Technical details

References

Community reviews

Related threats