Bug 1067563
| Summary: | selinux policy denies uucp.socket binding to uucp port | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Nils Philippsen <nphilipp> |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 20 | CC: | dominick.grift, dwalsh, kevin, lvrabec, mgrepl, mmalik, nphilipp |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | selinux-policy-3.12.1-127.fc20 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1031324 | Environment: | |
| Last Closed: | 2014-03-12 12:16:17 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1031324 | ||
| Bug Blocks: | |||
|
Description
Nils Philippsen
2014-02-20 16:16:09 UTC
BTW, Dan:
> --- Additional comment from Daniel Walsh on 2013-11-18 11:42:41 EST ---
>
> commit d964a0398b3ce94ff4cbc25fc503ae15f6653394 fixes this in git.
Where is this repository? If it's private, the commit hash isn't very informative... Trying to correlate comment dates, RPM changelog entries to find what change you implemented didn't work out as well.
Here's the module which makes this work again for me:
--- 8< --- localtmpselinuxuucp.te ---
module localtmpselinuxuucp 1.0;
require {
type uucpd_port_t;
type uucpd_t;
class tcp_socket name_bind;
}
#============= uucpd_t ==============
allow uucpd_t uucpd_port_t:tcp_socket name_bind;
--- >8 ------------------------------
We have these rules in Rawhide. (In reply to Daniel Walsh from comment #3) > We have these rules in Rawhide. Hmm, I meant that I didn't find a place where this commit hash is known, not upstream, not the Fedora dist-git: --- 8< --- nils@gibraltar:~/devel/git/fedora/selinux-policy (master)> git pull remote: Counting objects: 9, done. remote: Compressing objects: 100% (5/5), done. remote: Total 5 (delta 4), reused 0 (delta 0) Unpacking objects: 100% (5/5), done. From ssh://pkgs.fedoraproject.org/selinux-policy 450ad89..74ec503 master -> origin/master First, rewinding head to replay your work on top of it... Fast-forwarded master to 74ec503d1c10481ee512c8fcb11060d4c1f50408. nils@gibraltar:~/devel/git/fedora/selinux-policy (master)> git show d964a0398b3ce94ff4cbc25fc503ae15f6653394 fatal: bad object d964a0398b3ce94ff4cbc25fc503ae15f6653394 nils@gibraltar:~/devel/git/fedora/selinux-policy (master)> --- >8 --- https://git.fedorahosted.org/git/selinux-policy.git commit 61a37e3952fac15bd2b83e4b51a0be14a3195dbf Author: Miroslav Grepl <mgrepl> Date: Mon Feb 24 13:09:49 2014 +0100 Back port uucpd changes from rawhide selinux-policy-3.12.1-127.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/FEDORA-2014-2801/selinux-policy-3.12.1-127.fc20 Package selinux-policy-3.12.1-127.fc20: * should fix your issue, * was pushed to the Fedora 20 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.12.1-127.fc20' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2014-2801/selinux-policy-3.12.1-127.fc20 then log in and leave karma (feedback). selinux-policy-3.12.1-127.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report. |