Bug 489113

Summary: AVC Denail with /var/tmp and openswan ipsec service
Product: [Fedora] Fedora Reporter: Christopher Stone <chris.stone>
Component: openswanAssignee: Avesh Agarwal <avagarwa>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 11CC: avagarwa, mvadkert
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
URL: http://fpaste.org/paste/5371
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-04-19 15:46:44 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Alert Text none

Description Christopher Stone 2009-03-07 19:14:21 UTC 
Description of problem:
I get an AVC denial when I try to start the ipsec service after performing a yum install openswan.

http://fpaste.org/paste/5371

Steps to Reproduce:
1. yum install openswan
2. servce ipsec restart


Additional info:
# find / -inum 17776668 -print
/var/tmp
Comment 1 Christopher Stone 2009-03-07 19:18:01 UTC 
Created attachment 334408 [details]
Alert Text

Alert text as an attachment.
Comment 2 Daniel Walsh 2009-03-09 14:18:37 UTC 
Why is openswan using /var/tmp?

If it needs to use temporary files it should be using /var/run/

/var/racoon(/.*)?                       gen_context(system_u:object_r:ipsec_var_
run_t,s0)

/var/run/pluto(/.*)?                    gen_context(system_u:object_r:ipsec_var_
run_t,s0)
Comment 3 Bug Zapper 2009-06-09 11:59:41 UTC 
This bug appears to have been reported against 'rawhide' during the Fedora 11 development cycle.
Changing version to '11'.

More information and reason for this action is here:
http://fedoraproject.org/wiki/BugZappers/HouseKeeping
Comment 4 Avesh Agarwal 2010-04-19 15:46:44 UTC 
This is tested in the latest Openswan verison, and the issue does not appear
now. So I am closing this, and please reopen if you see this issue again.
Thanks for reporting the issue.