Bug 445161

Summary:	initrc_t can't transition into netlabel_mgmt_t
Product:	[Fedora] Fedora	Reporter:	Joe Nall <joe>
Component:	selinux-policy	Assignee:	Daniel Walsh <dwalsh>
Status:	CLOSED RAWHIDE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	low
Version:	rawhide	CC:	jkubin, john.wiseman, paul.moore
Target Milestone:	---
Target Release:	---
Hardware:	noarch
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2008-05-06 20:13:19 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Joe Nall 2008-05-05 00:37:33 UTC

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9b5) Gecko/2008042509 Fedora/3.0-0.55.beta5.fc9 Firefox/3.0b5

Description of problem:
I had to add the following policy to get the netlabel init script to work.

netlabel_domtrans_mgmt(initrc_t)
role system_r types netlabel_mgmt_t;


Version-Release number of selected component (if applicable):
selinux-policy-3.3.1-36.fc9

How reproducible:
Always


Steps to Reproduce:
Added configuration to /etc/netlabel.rule

unlbl accept off
unlbl add interface:eth0 address:192.168.120.244 label:user_u:user_r:remote_user_t:s4:c0,c2,c11,c200.c511
unlbl add interface:eth0 address:192.168.20.100  label:user_u:user_r:remote_user_t:s4:c0,c2,c11,c200.c511


Actual Results:
netlabel -p unlbl list
shows no  rule unles the policy is added

Expected Results:
Two rules

Additional info:

Comment 1 Daniel Walsh 2008-05-06 20:13:19 UTC

Fixed in selinux-policy-3.3.1-45.fc9