Bug 1426646

Summary: AVCs caused by FreeIPA code change
Product: [Fedora] Fedora Reporter: Martin Bašti <mbasti>
Component: selinux-policyAssignee: Lukas Vrabec <lvrabec>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 26CC: amarecek, dominick.grift, dwalsh, lvrabec, mgrepl, plautrba, pmoore, ssekidde
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: selinux-policy-3.13.1-251.fc26 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1432115 (view as bug list) Environment:
Last Closed: 2017-05-09 21:20:44 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
FreeIPA AVCs
none
rawhide AVCs (Fedora 27) none

Description Martin Bašti 2017-02-24 14:25:38 UTC
Created attachment 1257249 [details]
FreeIPA AVCs

Description of problem:
We changed how FreeIPA works with httpd what results into multiple AVCs

AVCs from permissive mode are attached.

Tested on F25, needed for F26 and RHEL7.4

Comment 1 Martin Bašti 2017-02-24 14:26:16 UTC
Please note that certmonger bugs were reported here: https://bugzilla.redhat.com/show_bug.cgi?id=1417846

Comment 3 Fedora End Of Life 2017-02-28 12:25:59 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 26 development cycle.
Changing version to '26'.

Comment 4 Aleš Mareček 2017-04-07 16:03:32 UTC
Created attachment 1269793 [details]
rawhide AVCs (Fedora 27)

Comment 6 Fedora Update System 2017-04-19 20:37:48 UTC
selinux-policy-3.13.1-251.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-f36794dd98

Comment 7 Fedora Update System 2017-04-20 20:22:56 UTC
selinux-policy-3.13.1-251.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-f36794dd98

Comment 8 Fedora Update System 2017-05-09 21:20:44 UTC
selinux-policy-3.13.1-251.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.