Bug 427003

Summary:	Context of git-shell is not shell_exec_t
Product:	[Fedora] Fedora	Reporter:	Dan Siemon <dan>
Component:	selinux-policy-targeted	Assignee:	Daniel Walsh <dwalsh>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Ben Levenson <benl>
Severity:	medium	Docs Contact:
Priority:	low
Version:	8
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	Current	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2008-01-30 19:05:45 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Dan Siemon 2007-12-29 22:02:03 UTC

Description of problem:
I have created a git user and set the SELinux user to guest_u. The shell for
this user has been changed to /usr/bin/git-shell. By default the context for
/usr/bin/git-shell is system_u:object_r:bin_t:s0. With this context the git user
cannot login and execute git-shell.

Changing the context of /usr/bin/git-shell to system_u:object_r:shell_exec_t:s0
fixes this problem.

In order to fix this temporarily I have added the following line to
/etc/selinux/targeted/contexts/files/file_contexts.local:
/usr/bin/git-shell      --      system_u:object_r:shell_exec_t:s0

Version-Release number of selected component (if applicable):
Fedora 8 with updates current as of Dec 29.

Comment 1 Daniel Walsh 2007-12-31 11:45:28 UTC

Fixed in selinux-policy-3.0.8-73.fc8

Comment 2 Daniel Walsh 2008-01-30 19:05:45 UTC

Bulk closing a old selinux policy bugs that were in the modified state.  If the
bug is still not fixed.  Please reopen.