Bug 1381914

Summary:	New cockpit binary needs policy changes
Product:	Red Hat Enterprise Linux 7	Reporter:	Lukas Vrabec <lvrabec>
Component:	selinux-policy	Assignee:	Lukas Vrabec <lvrabec>
Status:	CLOSED ERRATA	QA Contact:	Milos Malik <mmalik>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.4	CC:	dominick.grift, dperpeet, dwalsh, extras-qa, jscotka, lvrabec, mgrepl, mmalik, plautrba, pmoore, pvolpe, pvrabec, ssekidde, stefw
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	selinux-policy-3.13.1-177.el7	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	1381331	Environment:
Last Closed:	2018-04-10 12:24:04 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:	1381331
Bug Blocks:

Comment 7 Milos Malik 2018-01-10 08:14:34 UTC

The description talks about cockpit_ws_exec_t but /usr/libexec/cockpit-ssh is labeled cockpit_session_exec_t. Is it expected? Has the purpose of this bug changed since it was filed?

Comment 8 Lukas Vrabec 2018-02-07 08:43:16 UTC

This labels are backported from Fedora and I'm not aware of any issue related to this. Maybe we should ask cockpit folks if they have any troubles with this labels. 

Lukas.

Comment 12 errata-xmlrpc 2018-04-10 12:24:04 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2018:0763