Bug 459570

Summary: SELinux policy needs to be changed to support hal-set-keymap
Product: Red Hat Enterprise Linux 5 Reporter: Richard Hughes <rhughes>
Component: selinux-policyAssignee: Daniel Walsh <dwalsh>
Status: CLOSED ERRATA QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 5.3CC: mkoci, mmalik, syeghiay
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-01-20 21:30:27 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
selinux alert generated
none
audit2allow none

Description Richard Hughes 2008-08-20 09:31:00 UTC 
Created attachment 314617 [details]
selinux alert generated

Description of problem:
Dell laptops need hal-set-keycode for all the buttons to work. I've backported the patch from F9 into the HAL version in RHEL5, and the results can be found in #442623. The patch works well, but the new functionality needs a SELinux policy update.

Version-Release number of selected component (if applicable):
selinux-policy-2.4.6-137.el5

How reproducible:
Always.

Steps to Reproduce:
1. Install rpm's from http://brewweb.devel.redhat.com/brew/taskinfo?taskID=1430808
2. service haldaemon restart
3. Observe SELinux denial
  
Actual results:
Failed to fix keyboard when enforcing is enabled.

Expected results:
Fixed keyboard, even with enforcing.

Additional info:
This is a backport from F8/F9, so the policy can probably just be triviallly backported.
Comment 1 Richard Hughes 2008-08-20 09:32:31 UTC 
Created attachment 314618 [details]
audit2allow
Comment 2 Daniel Walsh 2008-08-20 11:20:55 UTC 
Fixed in selinux-policy-2.4.6-146.el5
Comment 9 errata-xmlrpc 2009-01-20 21:30:27 UTC 
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2009-0163.html