Bug 290111

Summary: setroubleshoot: wrong command suggested (no path)
Product: [Fedora] Fedora Reporter: Need Real Name <lsof>
Component: setroubleshootAssignee: John Dennis <jdennis>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: medium    
Version: 7   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-09-15 18:29:50 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Need Real Name 2007-09-13 21:42:50 UTC
The suggestion to run "chcon -t unconfined_execmem_exec_t X" is wrong. The final
part should contain the full path to the program.

Comment 1 John Dennis 2007-09-15 18:29:50 UTC
I'm going to close this as a dup of bug  244345. There are two issues at play
here. Sometimes the audit system does not return the full path. This is getting
better with new versions of the kernel and audit. Since setroubleshoot relies
exclusively on audit data we're somewhat at the mercy of what kernel/audit
returns. The second issue is that setroubleshoot attempts to compensate for
incomplete information and tries to intuit the path information from other data.

We're in the process of modifying setroubleshoot to not try and intuit the path
information, instead if it's available it will be used, otherwise it will
clearly indicate the information was absent, and not give partial information.

*** This bug has been marked as a duplicate of 244345 ***