Bug 1961728

Summary:	Backport SELinux policies around /var/lib/kdump
Product:	Red Hat Enterprise Linux 8	Reporter:	Kelvin Fan <kfan>
Component:	selinux-policy	Assignee:	Zdenek Pytela <zpytela>
Status:	CLOSED DUPLICATE	QA Contact:	BaseOS QE Security Team <qe-baseos-security>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	8.5	CC:	lvrabec, mmalik, plautrba, ssekidde
Target Milestone:	beta	Keywords:	Triaged
Target Release:	---	Flags:	pm-rhel: mirror+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:
Clones:	1991443 (view as bug list)		Environment:
Last Closed:	2021-06-14 14:08:51 UTC	Type:	Feature Request
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1991443, 2011878

Description Kelvin Fan 2021-05-18 15:08:50 UTC

Description of problem:
SELinux is preventing kdump from loading its generated initrd if `kdump` places its generated initrd in `/var/lib/kdump`, as may soon be the case for when `kdump` cannot place its generated initrd in the usual `/boot` on systems where `/boot` is mounted read-only, such as Fedora/RHEL CoreOS.

Additional info:
There is currently a fix in Fedora (tracked by https://bugzilla.redhat.com/show_bug.cgi?id=1951323), we would like for these updates to be backported to RHEL.

Comment 1 Kelvin Fan 2021-06-14 14:08:51 UTC


*** This bug has been marked as a duplicate of bug 1965985 ***