Bug 696628

Summary:	fping6 needs system_u:object_r:ping_exec_t:s0
Product:	[Fedora] Fedora	Reporter:	Tomasz Torcz <tomek>
Component:	selinux-policy	Assignee:	Miroslav Grepl <mgrepl>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	14	CC:	dwalsh, mgrepl
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	selinux-policy-3.9.7-40.fc14	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2011-04-25 00:00:37 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Tomasz Torcz 2011-04-14 13:28:01 UTC

Description of problem:
fping-2.4b2-10.fc12.i686 ships two executables:
/usr/sbin/fping
/usr/sbin/fping6

First one is set to system_u:object_r:ping_exec_t:s0, but "fping6" isn't.
It is causing following errors:

SELinux is preventing /usr/sbin/fping6 from write access on the rawip_socket Unknown. 
SELinux is preventing /usr/sbin/fping6 from using the net_raw capability. 

Setting context of fping6 to the same as fping makes those errors go away.

semanage fcontext show only definition for fping, not for fping6.

Comment 1 Daniel Walsh 2011-04-14 13:39:57 UTC

Miroslav back port this fix to F13,RHEL6 also.

/usr/sbin/fping.* 	--	gen_context(system_u:object_r:ping_exec_t,s0)

Comment 2 Miroslav Grepl 2011-04-18 07:20:30 UTC

Fixed in selinux-policy-3.9.7-40.fc14

Comment 3 Fedora Update System 2011-04-21 14:50:40 UTC

selinux-policy-3.9.7-40.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/selinux-policy-3.9.7-40.fc14

Comment 4 Fedora Update System 2011-04-21 22:26:16 UTC

Package selinux-policy-3.9.7-40.fc14:
* should fix your issue,
* was pushed to the Fedora 14 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing selinux-policy-3.9.7-40.fc14'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/selinux-policy-3.9.7-40.fc14
then log in and leave karma (feedback).

Comment 5 Fedora Update System 2011-04-24 23:59:25 UTC

selinux-policy-3.9.7-40.fc14 has been pushed to the Fedora 14 stable repository.  If problems still persist, please make note of it in this bug report.