Bug 1804626

Summary:	incorrect fcontext pattern for /run/pcsd-ruby.socket
Product:	Red Hat Enterprise Linux 8	Reporter:	Milos Malik <mmalik>
Component:	selinux-policy	Assignee:	Zdenek Pytela <zpytela>
Status:	CLOSED ERRATA	QA Contact:	Milos Malik <mmalik>
Severity:	low	Docs Contact:
Priority:	low
Version:	8.2	CC:	lvrabec, mmalik, plautrba, rfilo, ssekidde
Target Milestone:	rc	Keywords:	AutoVerified, Triaged
Target Release:	8.4
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-05-18 14:57:35 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Milos Malik 2020-02-19 09:59:59 UTC

Description of problem:
 * both pcsd and pcsd-ruby services run successfully, but /run/pcsd-ruby.socket is labeled incorrectly

Version-Release number of selected component (if applicable):
pcs-0.10.4-5.el8.x86_64
selinux-policy-3.14.3-40.el8.noarch
selinux-policy-devel-3.14.3-40.el8.noarch
selinux-policy-doc-3.14.3-40.el8.noarch
selinux-policy-minimum-3.14.3-40.el8.noarch
selinux-policy-mls-3.14.3-40.el8.noarch
selinux-policy-sandbox-3.14.3-40.el8.noarch
selinux-policy-targeted-3.14.3-40.el8.noarch

How reproducible:
 * always

Steps to Reproduce:
1. get a RHEL-8.2 machine (targeted policy is active)
2. start the pcsd service
3. run "restorecon -Rv /run"

Actual results:
Relabeled /run/pcsd-ruby.socket from system_u:object_r:cluster_var_run_t:s0 to system_u:object_r:var_run_t:s0

Expected results:
Correct fcontext pattern for /run/pcsd-ruby.socket is system_u:object_r:cluster_var_run_t:s0.

Additional info:
The /run/pcsd-ruby.socket exists only if pcsd or pcsd-ruby service is running.

Comment 2 Richard Fiľo 2020-03-06 10:04:57 UTC

In Fedora that bug is not reproducible because pcsd-ruby service doesn't exist there.

pcs.x86_64     0.10.4-1.fc31

Comment 13 errata-xmlrpc 2021-05-18 14:57:35 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (selinux-policy bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:1639