Bug 485078

Summary:	Wrong security context for sysstat package
Product:	Red Hat Enterprise Linux 5	Reporter:	Vadym Chepkov <vchepkov>
Component:	selinux-policy-targeted	Assignee:	Daniel Walsh <dwalsh>
Status:	CLOSED ERRATA	QA Contact:	BaseOS QE <qe-baseos-auto>
Severity:	medium	Docs Contact:
Priority:	low
Version:	5.3	CC:	dwalsh, mmalik, ohudlick
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2009-09-02 07:59:38 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Vadym Chepkov 2009-02-11 14:33:40 UTC

selinux policy has wrong context for sysstat package

sysstat-7.0.2-1.el5
selinux-policy-targeted-2.4.6-203.el5

I suspect at some moment files were mobved, but policy wasn't updated:

semanage fcontext -l |grep sysstat
/usr/lib(64)?/sa/sadc                              regular file       system_u:object_r:sysstat_exec_t:s0 
/usr/lib(64)?/sysstat/sa.*                         regular file       system_u:object_r:sysstat_exec_t:s0 

but files are actually here:

ls -Z /usr/lib64/sa/sa*
-rwxr-xr-x  root root system_u:object_r:lib_t:s0       /usr/lib64/sa/sa1
-rwxr-xr-x  root root system_u:object_r:lib_t:s0       /usr/lib64/sa/sa2
-rwxr-xr-x  root root system_u:object_r:sysstat_exec_t:s0 /usr/lib64/sa/sadc

Comment 1 Daniel Walsh 2009-02-11 16:31:06 UTC

Fixed in selinux-policy-2.4.6-210.el5

Comment 8 errata-xmlrpc 2009-09-02 07:59:38 UTC

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2009-1242.html