Bug 246272

Summary: avc denied {write} for comm="vgs" / comm="vgchange"
Product: Red Hat Enterprise Linux 5 Reporter: Alexander Todorov <atodorov>
Component: lvm2Assignee: Milan Broz <mbroz>
Status: CLOSED ERRATA QA Contact: Corey Marthaler <cmarthal>
Severity: low Docs Contact:
Priority: low    
Version: 5.1CC: agk, carlosvargas, dwalsh, dwysocha, jbrassow, jburke, jlaska, mbroz, prockai, pvrabec, robin.bowes
Target Milestone: ---Keywords: Regression, Reopened
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: RHBA-2007-0516 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-11-07 16:49:16 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Comment 6 Daniel Walsh 2007-07-02 20:24:16 UTC
Ok the problem here is that the directory /etc/lvm/cache is not defined in the
spec file so it does not get created by default, but only gets created when the
first lvm app runs.  This is not allowed by selinux policy.  This directory
should be created by the spec file, so it gets cleaned up correctly when the rpm
gets removed.  So I am reassigning this to lvm.

We tested this by making the directory and then rebooting.  AVC disappears.

Comment 10 Alexander Todorov 2007-08-29 12:34:09 UTC
not seeing this issue with lvm2-2.02.26-3.el5.
moving to VERIFIED

Comment 12 errata-xmlrpc 2007-11-07 16:49:16 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2007-0516.html


Comment 13 Alasdair Kergon 2007-11-21 19:15:00 UTC
*** Bug 241554 has been marked as a duplicate of this bug. ***

Comment 14 Milan Broz 2008-01-04 13:17:39 UTC
*** Bug 356351 has been marked as a duplicate of this bug. ***