Bug 1472722
Summary: | SELinux is preventing /usr/sbin/lldpad from sendto access on the unix_dgram_socket | |||
---|---|---|---|---|
Product: | Red Hat Enterprise Linux 7 | Reporter: | Dominik Holler <dholler> | |
Component: | selinux-policy | Assignee: | Lukas Vrabec <lvrabec> | |
Status: | CLOSED ERRATA | QA Contact: | Milos Malik <mmalik> | |
Severity: | high | Docs Contact: | Mirek Jahoda <mjahoda> | |
Priority: | high | |||
Version: | 7.3 | CC: | danken, dholler, lvrabec, mgrepl, mmalik, mthacker, plautrba, pvrabec, ssekidde | |
Target Milestone: | rc | Keywords: | ZStream | |
Target Release: | 7.4 | |||
Hardware: | All | |||
OS: | Linux | |||
Whiteboard: | ||||
Fixed In Version: | selinux-policy-3.13.1-167.el7 | Doc Type: | Bug Fix | |
Doc Text: |
*SELinux* now allows *vdsm* to communicate with *lldpad*
Prior to this update, *SELinux* in enforcing mode denied the *vdsm* daemon to access *lldpad* information. Consequently, *vdsm* was not able to work correctly. With this update, a rule to allow a `virtd_t` domain to send data to a `lldpad_t` domain through the `dgram` socket has been added to the _selinux-policy_ packages. As a result, *vdsm* labeled as `virtd_t` can now communicate with *lldpad* labeled as `lldpad_t` if *SELinux* is set to enforcing mode.
|
Story Points: | --- | |
Clone Of: | ||||
: | 1479767 (view as bug list) | Environment: | ||
Last Closed: | 2018-04-10 12:34:36 UTC | Type: | Bug | |
Regression: | --- | Mount Type: | --- | |
Documentation: | --- | CRM: | ||
Verified Versions: | Category: | --- | ||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
Cloudforms Team: | --- | Target Upstream Version: | ||
Bug Depends On: | ||||
Bug Blocks: | 1458501, 1479767 |
Description
Dominik Holler
2017-07-19 09:10:33 UTC
Yes, it blocks the linked RFE. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:0763 |