Bug 679789

Summary: policycoreutils: seunshare should be split to separate subpackage
Product: Red Hat Enterprise Linux 6 Reporter: Tomas Hoger <thoger>
Component: policycoreutilsAssignee: Daniel Walsh <dwalsh>
Status: CLOSED ERRATA QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.0CC: dwalsh, mmalik
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 682819 (view as bug list) Environment:
Last Closed: 2011-04-05 07:08:53 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Tomas Hoger 2011-02-23 14:28:04 UTC
Description of problem:
seunshare utility is setuid and is part of the main policycoreutils subpackage.  As this utility is used by sandbox feature, it's quite useless on most of the systems that need to have policycoreutils installed.  We should consider moving it out of the main subpackage so it can be easily removed by those who do not need it, in the similar way setuid newrole has its own subpackage.

The current way various sandbox components are split across subpackages may make this somewhat tricky:
- seunshare - policycoreutils
- sandbox - policycoreutils-python
- sandboxX - policycoreutils-sandbox

Version-Release number of selected component (if applicable):
policycoreutils-2.0.83-19.1.el6

Comment 1 RHEL Program Management 2011-02-23 14:38:04 UTC
This request was evaluated by Red Hat Product Management for
inclusion in the current release of Red Hat Enterprise Linux.
Because the affected component is not scheduled to be updated
in the current release, Red Hat is unfortunately unable to
address this request at this time. Red Hat invites you to
ask your support representative to propose this request, if
appropriate and relevant, in the next release of Red Hat
Enterprise Linux. If you would like it considered as an
exception in the current release, please ask your support
representative.

Comment 2 Daniel Walsh 2011-03-15 16:19:16 UTC
Fixed in policycoreutils-2.0.83-33.3.fc13

Comment 3 Daniel Walsh 2011-03-15 16:19:37 UTC
Fixed in policycoreutils-2.0.83-33.3.el6

Comment 4 Tomas Hoger 2011-04-05 07:08:53 UTC
https://rhn.redhat.com/errata/RHSA-2011-0414.html