Bug 1185907

Summary: selinux policy updates required for rabbitmq pacemaker resource-agent
Product: Red Hat Enterprise Linux 7 Reporter: Ryan Hallisey <rhallise>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED DUPLICATE QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: urgent Docs Contact:
Priority: high    
Version: 7.0CC: aberezin, agk, ajeain, cluster-maint, cluster-qe, cwolfe, dvossel, jeckersb, jguiditt, lhh, lvrabec, mburns, mgrepl, mmalik, morazi, ohochman, plautrba, pvrabec, rhos-maint, sasha, srevivo, ssekidde, yeylon
Target Milestone: rcKeywords: ZStream
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 1185444
: 1185909 (view as bug list) Environment:
Last Closed: 2015-01-27 09:15:53 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1185444    
Bug Blocks: 1168755, 1177026, 1184280, 1185909    

Comment 1 Ryan Hallisey 2015-01-26 15:33:51 UTC
type=USER_AVC msg=audit(1422033446.927:1930): pid=593 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.159 spid=591 tpid=3187 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:cluster_t:s0 tclass=dbus  exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'

allow systemd_logind_t cluster_t:dbus send_msg;

Comment 3 Miroslav Grepl 2015-01-27 09:15:53 UTC

*** This bug has been marked as a duplicate of bug 1185909 ***