Bug 618887

Summary: SELinux Error Notification Error
Product: Red Hat Enterprise Linux 5 Reporter: Michael Convey <smconvey>
Component: setroubleshoot-pluginsAssignee: Daniel Walsh <dwalsh>
Status: CLOSED NEXTRELEASE QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: medium Docs Contact:
Priority: low    
Version: 5.5CC: dwalsh, smconvey
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-03-19 14:14:43 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Description Michael Convey 2010-07-28 00:37:12 UTC
When attempting to use the command "cp -a" to copy files from a DVD to my ext3 formatted hard drive, I get the following error:

"Summary:

SELinux is preventing cp from creating a file with a context of iso9660_t on a
filesystem.

Detailed Description:

SELinux is preventing cp from creating a file with a context of iso9660_t on a
filesystem. Usually this happens when you ask the cp command to maintain the
context of a file when copying between file systems, "cp -a" for example. Not
all file contexts should be maintained between the file systems. For example, a
read-only file type like iso9660_t should not be placed on a r/w system. "cp -P"
might be a better solution, as this will adopt the default file context for the
destination.

Allowing Access:

Use a command like "cp -P" to preserve all permissions except SELinux context..."

However, the following two statements in the error messaged above contain errors:

1) "cp -P" might be a better solution, as this will adopt the default file context for the destination.

2) Use a command like "cp -P" to preserve all permissions except SELinux context.

The error is as follows: According to the cp man page, the "-P" option of the cp command means "--no-dereference". It is the "-p" (lower case p) option that means "same as --preserve=mode,ownership,timestamps".

Please change the SELinux error messages from "-P" to "-p".

Comment 1 Daniel Walsh 2013-03-19 14:14:43 UTC
Fixed in RHEL6.