Bug 1018314

Summary:	Cannot change a user's home directory SELinux label via the use of an selinux module
Product:	Red Hat Enterprise Linux 6	Reporter:	rlopez
Component:	libsemanage	Assignee:	Petr Lautrbach <plautrba>
Status:	CLOSED NOTABUG	QA Contact:	BaseOS QE Security Team <qe-baseos-security>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.4	CC:	dwalsh, eparis, mmalik, sdsmall
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-11-02 17:03:45 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description rlopez 2013-10-11 16:50:30 UTC

Description of problem:

Currently working with Dan Walsh on creating a Oracle SELinux policy, and one of the issues encountered is trying to change the SELinux label of Oracle's oradiag_oracle folder located in its homedir from user_home_t to oracle_log_t. Apparently, homedir labeling happens after module labeling.

Within the oracle.fc file ,
/home/oracle/oradiag_oracle(.*/)?                                       gen_context(system_u:object_r:oracle_log_t,s0)

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 3 Daniel Walsh 2013-10-11 19:51:04 UTC

Should be

/home/oracle/oradiag_oracle(/.*)?                                       gen_context(system_u:object_r:oracle_log_t,s0)

One potential change to fix this for now would be

HOME_DIR/oradiag_oracle(/.*)? 

Which would cause this label to apply to all users.

Comment 4 RHEL Program Management 2013-10-13 23:00:23 UTC

This request was evaluated by Red Hat Product Management for
inclusion in the current release of Red Hat Enterprise Linux.
Because the affected component is not scheduled to be updated
in the current release, Red Hat is unable to address this
request at this time.

Red Hat invites you to ask your support representative to
propose this request, if appropriate, in the next release of
Red Hat Enterprise Linux.

Comment 6 Petr Lautrbach 2016-11-02 17:03:45 UTC

Red Hat Enterprise Linux version 6 is entering the Production 2 phase of its lifetime and this bug doesn't meet the criteria for it, i.e. only high severity issues will be fixed. Please see https://access.redhat.com/support/policy/updates/errata/ for further information.

Feel free to clone this bug to RHEL-7 if this is still issue for you.