Description of problem:
nagios-server-addons should have a dependency on selinux packages in RHEL-6.7
Version-Release number of selected component (if applicable):
nagios-server-addons-0.2.1-3.el6rhs
The packages that Milos mentions [1] as possible candidates for
dependent packages list are
+ policycoreutils package because it brings the setsebool command
+ libselinux-utils package because it brings the getsebool command
+ selinux-policy-targeted or selinux-policy-base (virtual package)
because it brings the policy where booleans are defined and stored
If the semanage command is to be used, I would add to the list
+ policycoreutils-python package because it brings the semanage command
It is also interesting to note that the policycoreutils-python package
depends on the policycoreutils package, which further depends on the
libselinux-utils package
And the selinux-policy-targeted package dependency must have a minimal
version restriction for that version which has all the SELinux policy
rules for RHGS 3.1.
See the following BZ's for more details regarding this decision:
https://bugzilla.redhat.com/show_bug.cgi?id=1238055https://bugzilla.redhat.com/show_bug.cgi?id=1237065
The following SELinux el6 build which has almost all the gluster-SELinux fixes in RHEL-6.7 is what I see as a possible candidate for setting this dependency:
#####
https://brewweb.devel.redhat.com/buildinfo?buildID=443534
#####
Miroslav/Milos, please confirm if this is the case.
Verified and works fine with build nagios-server-addons-0.2.1-4.el6rhs.noarch
Package: nagios-server-addons-0.2.1-4.el6rhs.noarch has (RH-Gluster-3-Nagios-Server) Requires: selinux-policy-targeted >= 3.7.19-279
Following booleans were set when nagios-server-addons is installed on a RHEL6.7 machine.
getsebool -a | grep nagios
logging_syslogd_run_nagios_plugins --> off
nagios_run_sudo --> on
Marking this verified.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://rhn.redhat.com/errata/RHEA-2015-1494.html