Bug 210425

Summary:	[labeled networking] NetLabel CIPSOv4 passthrough mapping does not work correctly
Product:	Red Hat Enterprise Linux 5	Reporter:	Paul Moore <paul.moore>
Component:	kernel	Assignee:	Eric Paris <eparis>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Brian Brock <bbrock>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	5.0	CC:	iboverma, linda.knippers
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	beta2	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2006-12-23 01:16:08 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	208884

Description Paul Moore 2006-10-11 23:27:36 UTC

Description of problem:
The NetLabel subsystem has a problem with the CIPSOv4 passthrough mapping does
not work correctly, in some cases kernel oopses are possibile.  There have been
patches posted to the SELinux and netdev mailing lists which fix these problems.

 * http://marc.theaimsgroup.com/?l=linux-netdev&m=116060895810450&w=2
 * http://marc.theaimsgroup.com/?l=linux-netdev&m=116060895712178&w=2
 * http://marc.theaimsgroup.com/?l=linux-netdev&m=116060895710963&w=2

Version-Release number of selected component (if applicable):
kernel-2.6.18-1.2725.el5

How reproducible:
Everytime

Steps to Reproduce:
1. netlabelctl cipsov4 add pass doi:1 tags:1
2. netlabelctl map del default
3. netlabelctl map add default protocol:cipsov4,1
4. runcon -l s0:c1 telnetl localhost
  
Actual results:
The kernel will oops.

Expected results:
The kernel will not oops.

Additional info:
This directly effects the LSPP efforts of RH, HP, and IBM.

Comment 1 Irina Boverman 2006-10-12 20:42:07 UTC

this defect should be resolved before rc1

Comment 2 Eric Paris 2006-10-16 20:03:22 UTC

Test kernel including fixes for this problem can be found at
people.redhat.com/sgrubb/ inside the lspp repo.  Look for lspp.52 or later.

Comment 3 Eric Paris 2006-10-26 18:26:13 UTC

posted for internel inclusion in RHEL5 on Oct 26

Comment 4 Jay Turner 2006-11-20 18:29:44 UTC

QE ack for RHEL5.

Comment 5 Don Zickus 2006-11-29 22:25:52 UTC

in 2.6.18-1.2767.el5

Comment 6 RHEL Program Management 2006-12-23 01:16:09 UTC

A package has been built which should help the problem described in 
this bug report. This report is therefore being closed with a resolution 
of CURRENTRELEASE. You may reopen this bug report if the solution does 
not work for you.