Red Hat Security Advisory: fapolicyd bug fix update
Affects Red Hat fapolicydSource GCVE Database
Rated by Threat Radar
Data as of 14 Nov 2026, 17:49 UTC
What to do
AI-suggested
Apply the updated fapolicyd package provided in the security erratum to ensure the daemon correctly handles binaries with the " (deleted)" suffix. This fix restores normal update behavior and prevents boot failures caused by the bug. No additional mitigation is required as this is a bug fix, not a security vulnerability.
Description
A bug in the fapolicyd file access control daemon caused it to treat updated running binaries with a " (deleted)" suffix as untrusted, blocking their file access and sometimes preventing system boot after updates. The update fixes this by ignoring the suffix, allowing proper enforcement of trust policies and successful update completion. This fix was previously released but is reissued as a security erratum for visibility. The issue does not introduce new security vulnerabilities.
References
- access.redhat.com/errata/RHSA-2020:5608 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/errata/RHBA-2020:5243 (opens in a new tab)
- access.redhat.com/solutions/5542661 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1906473 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5608.json (opens in a new tab)