Bug 239707

Summary: avc:denied /usr/sbin/in.tftpd (tftpd_t)
Product: [Fedora] Fedora Reporter: ericm24x7
Component: tftpAssignee: Martin Nagy <mnagy>
Status: CLOSED NOTABUG QA Contact: David Lawrence <dkl>
Severity: medium Docs Contact:
Priority: medium    
Version: rawhideCC: hripps, mbarabas
Target Milestone: ---Keywords: SELinux
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-03-03 10:53:29 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
selinux troubleshooter output log none

Description ericm24x7 2007-05-10 17:14:57 UTC 
Description of problem:
selinux denying access for tftpd.

here is the raw audit messages:

avc: denied { search } for comm="in.tftpd" dev=sda6 egid=0 euid=0
exe="/usr/sbin/in.tftpd" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="/"
pid=3873 scontext=user_u:system_r:tftpd_t:s0 sgid=0

Version-Release number of selected component (if applicable):
tftp-server-0.42-4
selinux-policy-2.6.1-1.fc7
filesystem-2.4.6-1.fc7

How reproducible:
persistent

Steps to Reproduce:
1. yum install tftp tftp-server
2. vi /etc/xinetd.d/tftp
   # edit/change the following variables:
    disable = no
    server_args = -s /a
3. execute from remote client:
   # assumed localhost = 192.168.3.103 and /a has "pxelinux.0" file
   tftp 192.168.3.103 -c get pxelinux.0

Actual results:
From client getting "Transfer timed out."
Attached file is the output of selinux troubleshooter
Comment 1 ericm24x7 2007-05-10 17:14:57 UTC 
Created attachment 154486 [details]
selinux troubleshooter output log
Comment 2 Martin Nagy 2008-03-03 10:53:29 UTC 
This is not a bug and selinux is supposed to deny access. Hence closing as NOTABUG.
If you want to fix this, execute:
chcon --reference=/tftpboot /a