Bug 247435

Summary: queuegraph is denied by selinux
Product: [Fedora] Fedora EPEL Reporter: Leif O M Bergman <lmb>
Component: queuegraphAssignee: Bernard Johnson <bjohnson>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: low    
Version: el5   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: 1.1-2.fc7 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-11-16 00:37:15 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Leif O M Bergman 2007-07-09 10:31:19 UTC
Description of problem:
The cgi script have bad selinux permissions.

Version-Release number of selected component (if applicable):
queuegraph-1.1-1.el5

How reproducible:
Always in enforcing mode

Steps to Reproduce:
1. yum install queuegraph
2. *tinker with apache config*
3.
  
Actual results:
In webserver logs
    "Premature end of script headers: queuegraph.cgi"

Expected results:
Nice graphs of the mail traffic

Additional info:
semanage fcontext -a -t httpd_sys_script_exec_t "/usr/share/queuegraph(/.*)?"
semanage fcontext -a -t httpd_sys_content_t "/var/lib/queuegraph(/.*)?"
semanage fcontext -a -t httpd_sys_content_t "/var/cache/queuegraph(/.*)?"

This will make everything work again. Should go into the rpmscriptlets?

Comment 1 Bernard Johnson 2007-07-12 17:23:44 UTC
(In reply to comment #0)
> This will make everything work again. Should go into the rpmscriptlets?

It's a little more complicated than that.  It requires a selinux policy package.
 I'm working on one for the mailgraph program right now and I'll start this one
next.



Comment 2 Fedora Update System 2007-11-06 16:13:51 UTC
queuegraph-1.1-2.fc8 has been pushed to the Fedora 8 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update queuegraph'

Comment 3 Fedora Update System 2007-11-09 23:47:51 UTC
queuegraph-1.1-2.fc7 has been pushed to the Fedora 7 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update queuegraph'

Comment 4 Fedora Update System 2007-11-16 00:37:12 UTC
queuegraph-1.1-2.fc7 has been pushed to the Fedora 7 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 5 Fedora Update System 2007-11-16 00:41:54 UTC
queuegraph-1.1-2.fc8 has been pushed to the Fedora 8 stable repository.  If problems still persist, please make note of it in this bug report.