Bug 253537
Summary: | avc: denied { getattr } for comm="named" path="/dev/random" | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | Red Hat Enterprise Linux 5 | Reporter: | Milan Zázrivec <mzazrivec> | ||||||
Component: | bind | Assignee: | Adam Tkac <atkac> | ||||||
Status: | CLOSED ERRATA | QA Contact: | Ben Levenson <benl> | ||||||
Severity: | low | Docs Contact: | |||||||
Priority: | low | ||||||||
Version: | 5.1 | CC: | atodorov, dwalsh, ovasik | ||||||
Target Milestone: | --- | Keywords: | EasyFix, Patch, Reopened | ||||||
Target Release: | --- | ||||||||
Hardware: | All | ||||||||
OS: | Linux | ||||||||
Whiteboard: | |||||||||
Fixed In Version: | RHSA-2008-0300 | Doc Type: | Bug Fix | ||||||
Doc Text: | Story Points: | --- | |||||||
Clone Of: | Environment: | ||||||||
Last Closed: | 2008-05-21 14:17:46 UTC | Type: | --- | ||||||
Regression: | --- | Mount Type: | --- | ||||||
Documentation: | --- | CRM: | |||||||
Verified Versions: | Category: | --- | |||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||
Embargoed: | |||||||||
Attachments: |
|
Description
Milan Zázrivec
2007-08-20 14:17:05 UTC
Created attachment 161876 [details]
audit.log
For some reason /dev/random is labeled incorrectly. Probably in the chroot environment. restorecon -R -v /var/named restorecon -R -v /var/named helps, but since this was a new install, relabeling just to make this denial disappear is not acceptable. Reopening and reassigning to bind. problem is that /dev/random is mislabeled during installation so /usr/bin/chcon --reference=/dev/random ${BIND_CHROOT_PREFIX}/dev/random; makes ${BIND_CHROOT_PREFIX}/dev/random mislabeled Created attachment 161970 [details]
proposed patch
use restorecon instead chcon
Adding to 5.2 proposed For QA: try install bind-chroot in default installation (with enabled selinux). Old package has mislabeled /dev/random in chroot This request was evaluated by Red Hat Product Management for inclusion in a Red Hat Enterprise Linux maintenance release. Product Management has requested further review of this request by Red Hat Engineering, for potential inclusion in a Red Hat Enterprise Linux Update release for currently deployed products. This request is not yet committed for inclusion in an Update release. *** Bug 431202 has been marked as a duplicate of this bug. *** Verified with RHEL5.2-Server-20080212.0 / bind-chroot-9.3.4-4.P1.el5 An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on the solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2008-0300.html |