Bug 174153
| Summary: | Dell OpenManage can't use net-snmp using targetted policy | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 4 | Reporter: | Bastien Nocera <bnocera> | ||||
| Component: | selinux-policy-targeted | Assignee: | Daniel Walsh <dwalsh> | ||||
| Status: | CLOSED CURRENTRELEASE | QA Contact: | |||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | medium | ||||||
| Version: | 4.0 | CC: | ritesh_sarraf, tao, wwlinuxengineering | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | u3 | Doc Type: | Bug Fix | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2006-03-23 14:18:31 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
Created attachment 121480 [details]
snmpd.te.patch
Have you tried the test u3 policy available on ftp://people.redhat.com/dwalsh/SELinux/RHEL4/u3/noarch Does not work:
Dec 1 14:57:36 josh800 kernel: audit(1133470656.371:2): avc: denied { read }
for pid=3904 comm="snmpd" name="sh" dev=sda3 ino=9846793
scontext=root:system_r:snmpd_t tcontext=system_u:object_r:bin_t tclass=lnk_file
Try 123 on people. From User-Agent: XML-RPC The package selinux-policy-targeted-1.17.30-2.123.noarch.rpm from the ftp link provided appears to have resolved the issue. Is it slated for inclusion in RHEL4 U3? The beta1 code has selinux-policy-targeted-1.17.30-2.122.noarch.rpm. This event sent from IssueTracker by ltroan issue 83719 Yes this fix will be in U3 Fixed in RHEL4 Update3 Beta3 |
When Dell OpenManage tries to talk to snmpd: avc: denied { read } for pid=13940 exe=/usr/sbin/snmpd name=sh dev=dm-0 ino=65547 scontext=root:system_r:snmpd_t tcontext=system_u:object_r:bin_t tclass=lnk_file Patch from Rezwanul_Kabir