Bug 1462824

Summary: [SELINUX-RHEL6]statedump is not able to dump the file in /var/run/gluster because of SELinux permissions [rhel-6.9.z]
Product: Red Hat Enterprise Linux 6 Reporter: Atin Mukherjee <amukherj>
Component: selinux-policyAssignee: Lukas Vrabec <lvrabec>
Status: CLOSED ERRATA QA Contact: Milos Malik <mmalik>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.9CC: amukherj, dapospis, dwalsh, igkioka, jreznik, lvrabec, madam, mgrepl, mmalik, plautrba, pvrabec, rcyriac, rhs-smb, sbhaloth, ssekidde, tlavigne, toneata, vdas
Target Milestone: rcKeywords: ZStream
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Previously, rules that allow the smbd_t SELinux domain to edit files to the /var/run/gluster directory were missing. As a consequence, when the statedump command was executed to collect the files on the gfapi side, statedump was not able to dump the files to the /var/run/gluster directory. With this update, the missing rules have been added to the Samba SELinux distribution policy, and smbd_t SELinux can now successfully edit the files.
Story Points: ---
Clone Of: 1461064 Environment:
Last Closed: 2017-07-11 18:50:18 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1461044, 1461064    

Comment 6 errata-xmlrpc 2017-07-11 18:50:18 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:1727