Bug 700505

Summary: pki tomcat6 instances currently running unconfined
Product: [Retired] Dogtag Certificate System Reporter: Ade Lee <alee>
Component: SELinuxAssignee: Ade Lee <alee>
Status: CLOSED EOL QA Contact: Ben Levenson <benl>
Severity: high Docs Contact:
Priority: high    
Version: 9.0CC: cfu, dlackey, dpal, jmagne, mharmsen
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 700522 (view as bug list) Environment:
Last Closed: 2020-03-27 18:34:50 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 530474, 700522, 732064, 732084    
Attachments:
Description Flags
patch to fix
mharmsen: review+
patch to make sure server comes up when selinux disabled awnuk: review+

Description Ade Lee 2011-04-28 14:46:21 UTC 
Description of problem:

Due to changes in the startup scripts, pki tomcat6 instances (on tip and on ipa branch) currently run unconfined.  That is, the pki selinux policy is present but is not being used.


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:
Comment 3 Ade Lee 2011-08-09 15:40:23 UTC 
Created attachment 517433 [details]
patch to fix
Comment 4 Ade Lee 2011-08-09 17:26:48 UTC 
tip: 

[vakwetu@dhcp231-121 base]$ svn ci -m "Resolves #700505 - pki tomcat6 instances currently running unconfined"
Sending        base/common/scripts/functions
Sending        base/selinux/src/pki.fc
Sending        base/selinux/src/pki.if
Sending        base/selinux/src/pki.te
Transmitting file data ....
Committed revision 2127.
Comment 5 Ade Lee 2011-08-15 20:32:11 UTC 
Created attachment 518327 [details]
patch  to make sure server comes up when selinux disabled
Comment 6 Ade Lee 2011-08-15 20:47:46 UTC 
tip:

[vakwetu@dhcp231-121 base]$ svn ci -m "Resolves #700522 - pki tomcat6 instances currently running unconfined, allow server to come up when selinux disabled"
Sending        base/common/scripts/functions
Transmitting file data .
Committed revision 2146.