Bug 1019299

Summary: execmod denied
Product: Red Hat Enterprise Linux 7 Reporter: Karel Volný <kvolny>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED DUPLICATE QA Contact: Milos Malik <mmalik>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.0CC: mmalik
Target Milestone: rc   
Target Release: ---   
Hardware: s390x   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-10-21 13:49:19 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Karel Volný 2013-10-15 12:47:15 UTC
Description of problem:
Running the test /CoreOS/cyrus-imapd/Regression/bz484377-replication-segfault on s390x I'm getting errors like these:

----
time->Tue Oct 15 03:01:45 2013
type=SYSCALL msg=audit(1381802505.658:650): arch=80000016 syscall=125 success=no exit=-13 a0=3fff9538000 a1=6000 a2=5 a3=0 items=0 ppid=45304 pid=45353 auid=4294967295 uid=76 gid=12 euid=76 suid=76 fsuid=76 egid=12 sgid=12 fsgid=12 tty=(none) ses=4294967295 comm="imapd" exe="/usr/lib/cyrus-imapd/imapd" subj=system_u:system_r:cyrus_t:s0 key=(null)
type=AVC msg=audit(1381802505.658:650): avc:  denied  { execmod } for  pid=45353 comm="imapd" path="/usr/lib64/sasl2/libsasldb.so.3.0.0" dev="dm-2" ino=33596938 scontext=system_u:system_r:cyrus_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
----

Dan says[*] I should report a bug, so here it is :-)

[*] http://danwalsh.livejournal.com/6117.html?thread=23525


Version-Release number of selected component (if applicable):
cyrus-imapd-2.4.17-5.el7.s390x

How reproducible:
haven't retried

Steps to Reproduce:
1. schedule the test /CoreOS/cyrus-imapd/Regression/bz484377-replication-segfault

Actual results:
http://lab-02.rhts.eng.bos.redhat.com/beaker/logs/results/82842+/82842821/test_log-Testing-avc.log

Expected results:
no such denials

Additional info:

Comment 2 Miroslav Grepl 2013-10-21 13:49:19 UTC

*** This bug has been marked as a duplicate of bug 1020295 ***