Red Hat Security Advisory: fapolicyd bug fix update
Affects Red Hat fapolicydSource GCVE Database
Rated by Threat Radar
Data as of 14 Nov 2026, 17:50 UTC
What to do
AI-suggested
Apply the updated fapolicyd package provided by Red Hat that includes the fix to ignore the " (deleted)" suffix in binary paths. This update resolves the issue preventing system boot after updates. No additional security actions are required as this erratum does not address a security vulnerability.
Description
A bug in the fapolicyd file access control daemon caused it to treat updated running application binaries with a " (deleted)" suffix as untrusted, blocking their file access and sometimes preventing system boot after updates. The issue has been fixed by updating fapolicyd to ignore this suffix, allowing proper enforcement of trust policies and successful update completion. This fix was previously released but is reissued as a security erratum for visibility. No new security vulnerabilities are introduced or fixed by this update.
References
- access.redhat.com/errata/RHSA-2020:5609 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/errata/RHBA-2020:5241 (opens in a new tab)
- access.redhat.com/solutions/5542661 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1906474 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5609.json (opens in a new tab)