Bug 1038567

Summary:	disable=1 line in setrans.conf has no effect
Product:	Red Hat Enterprise Linux 7	Reporter:	Milos Malik <mmalik>
Component:	selinux-policy	Assignee:	Miroslav Grepl <mgrepl>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Milos Malik <mmalik>
Severity:	medium	Docs Contact:
Priority:	high
Version:	7.0	CC:	mgrepl
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	selinux-policy-3.12.1-126.el7	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-06-13 12:15:06 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Milos Malik 2013-12-05 11:06:59 UTC

Description of problem:
The setrans.conf file contains following lines:

# Uncomment the following to disable translation libary
# disable=1

Version-Release number of selected component (if applicable):
mcstrans-0.3.4-3.el7.x86_64
selinux-policy-3.12.1-108.el7.noarch
selinux-policy-targeted-3.12.1-108.el7.noarch
selinux-policy-doc-3.12.1-108.el7.noarch
selinux-policy-devel-3.12.1-108.el7.noarch
selinux-policy-minimum-3.12.1-108.el7.noarch
selinux-policy-mls-3.12.1-108.el7.noarch

How reproducible:
always

Steps to Reproduce:
1. uncomment following line in /etc/selinux/targeted/setrans.conf
# disable=1
2. restart mcstransd
3. ls -dZ .

Actual results:
dr-xr-x---. root root system_u:object_r:admin_home_t:SystemLow .

Expected results:
Either the output of "ls -dZ ." is
dr-xr-x---. root root system_u:object_r:admin_home_t:s0 .

or the "disable=1" line is removed from the setrans.conf file.

Comment 1 Miroslav Grepl 2014-02-03 13:12:19 UTC

I will remove it from setrans.conf. It also does not work on RHEL6.

Comment 4 Ludek Smid 2014-06-13 12:15:06 UTC

This request was resolved in Red Hat Enterprise Linux 7.0.

Contact your manager or support representative in case you have further questions about the request.