Bug 1381914

Summary: New cockpit binary needs policy changes
Product: Red Hat Enterprise Linux 7 Reporter: Lukas Vrabec <lvrabec>
Component: selinux-policyAssignee: Lukas Vrabec <lvrabec>
Status: CLOSED ERRATA QA Contact: Milos Malik <mmalik>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.4CC: dominick.grift, dperpeet, dwalsh, extras-qa, jscotka, lvrabec, mgrepl, mmalik, plautrba, pmoore, pvolpe, pvrabec, ssekidde, stefw
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: selinux-policy-3.13.1-177.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1381331 Environment:
Last Closed: 2018-04-10 12:24:04 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1381331    
Bug Blocks:    

Comment 7 Milos Malik 2018-01-10 08:14:34 UTC 
The description talks about cockpit_ws_exec_t but /usr/libexec/cockpit-ssh is labeled cockpit_session_exec_t. Is it expected? Has the purpose of this bug changed since it was filed?
Comment 8 Lukas Vrabec 2018-02-07 08:43:16 UTC 
This labels are backported from Fedora and I'm not aware of any issue related to this. Maybe we should ask cockpit folks if they have any troubles with this labels. 

Lukas.
Comment 12 errata-xmlrpc 2018-04-10 12:24:04 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2018:0763