Bug 1477960

Summary:	in RHEL 7.5 SELinux policy for Tomcat will deny access to rpm database and maybe to PostgreSQL as well
Product:	[Community] Spacewalk	Reporter:	Jan Hutař <jhutar>
Component:	Server	Assignee:	Michael Mráka <mmraka>
Status:	CLOSED EOL	QA Contact:	Red Hat Satellite QA List <satqe-list>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	2.6
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-10-21 13:26:14 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1477887, 1477948
Bug Blocks:

Description Jan Hutař 2017-08-03 10:20:35 UTC

Description of problem:
In RHEL 7.5 SELinux policy for Tomcat will deny access to rpm database (but maybe there will be a boolean to enable that). Same for PostgreSQL. We need to change Spacewalk policy to work with this.


Version-Release number of selected component (if applicable):
Spacewalk 2.7


How reproducible:
always


Steps to Reproduce:
1. Make sure Spacewalk works in Enforcing even when blocking bugs are resolved


Actual results:
It is possible that once these two blocking bugs are resolved, Tomcat in RHEL 7.5 might not be allowed to access rpm database and PostgreSQL port. That would break Spacewalk in Enforcing


Expected results:
Spacewalk have to work in Enforcing

Comment 1 Michael Mráka 2019-10-21 13:26:14 UTC

Spacewalk 2.8 (and older) has already reached it's End Of Life.

Thank you for reporting this issue and we are sorry that we were not
able to fix it before end of life. If you would still like
to see this bug fixed and are able to reproduce it against current version
of Spacewalk 2.9, you are encouraged change the 'version' and re-open it.