Bug 132306
| Summary: | ldd displays nothing for protected executables | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Jason Vas Dias <jvdias> |
| Component: | selinux-policy-targeted | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED RAWHIDE | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | rawhide | CC: | djuran |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2005-04-12 21:47:45 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Fixed in glibc-2.3.3-54 Still happening with glibc-2.3.3-54 and selinux-policy-targeted-1.17.18-3 . I can't reproduce this with glibc-2.3.5-0.fc3.1 and selinux-policy-targeted-1.23.8-2 any longer, so it seems to me like this can be closed as fixed-rawhide. |
From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040510 Description of problem: ldd displays no output for executables such as named, dhcpd which do not have "unlabeled_t" read access in enforcing mode. Doing "setenforce 0" allows ldd to display output. The audit2allow message obtained is : "allow named_t unlabeled_t:file { read; };" Version-Release number of selected component (if applicable): selinux-policy-targeted-1.17.11-2 How reproducible: Always Steps to Reproduce: 1. Run selinux in enforcing mode 2. Enter the command: $ ldd /usr/sbin/named or $ ldd /usr/sbin/dhcpd (or for any protected executable) Actual Results: No output is displayed, and an audit message appears in /var/log/messages. Expected Results: ldd should display of list of linked libraries as for other executables. Additional info: Dan Walsh asked me to raise this bug.