Bug 1359237
Summary: | AVC on dirsrv config caused by IPA installer | ||||||
---|---|---|---|---|---|---|---|
Product: | Red Hat Enterprise Linux 7 | Reporter: | Martin Babinsky <mbabinsk> | ||||
Component: | ipa | Assignee: | IPA Maintainers <ipa-maint> | ||||
Status: | CLOSED ERRATA | QA Contact: | Kaleem <ksiddiqu> | ||||
Severity: | unspecified | Docs Contact: | |||||
Priority: | unspecified | ||||||
Version: | 7.3 | CC: | mbasti, pvoborni, rcritten | ||||
Target Milestone: | rc | ||||||
Target Release: | --- | ||||||
Hardware: | Unspecified | ||||||
OS: | Unspecified | ||||||
Whiteboard: | |||||||
Fixed In Version: | ipa-4.4.0-4.el7 | Doc Type: | If docs needed, set a value | ||||
Doc Text: | Story Points: | --- | |||||
Clone Of: | Environment: | ||||||
Last Closed: | 2016-11-04 05:58:57 UTC | Type: | --- | ||||
Regression: | --- | Mount Type: | --- | ||||
Documentation: | --- | CRM: | |||||
Verified Versions: | Category: | --- | |||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
Cloudforms Team: | --- | Target Upstream Version: | |||||
Embargoed: | |||||||
Attachments: |
|
Description
Martin Babinsky
2016-07-22 14:57:18 UTC
Fixed upstream master: https://fedorahosted.org/freeipa/changeset/f8bf8a62402a4385a7cc2f73b37b654b47713d60 ipa-4-3: https://fedorahosted.org/freeipa/changeset/64bbbb52a20200025017d0b29c9fa2dcdd7ad83d Steps to reproduce: 1. # setenforce 1 2. # ipa-server-install 3. installation will fail on restarting dirsrv I was able to reproduce this locally on my local VM, but I haven't been able to to reproduce this in lab. But anyway we should play safe and prevent possible future AVCs. Verified. IPA Version: ============ [root@dhcp207-129 ~]# rpm -q ipa-server ipa-server-4.4.0-10.el7.x86_64 [root@dhcp207-129 ~]# Please find the attached console output. Created attachment 1199493 [details]
console output with verification steps
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-2404.html |