Bug 786088

Summary: SELinux prevents qpidd (qpidd_t) from search operation on /sys (sysfs_t) directory
Product: Red Hat Enterprise Linux 6 Reporter: RHEL Program Management <pm-rhel>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED ERRATA QA Contact: Frantisek Reznicek <freznice>
Severity: high Docs Contact:
Priority: high    
Version: 6.2CC: dwalsh, esammons, freznice, iboverma, jneedle, jpallich, jross, ksrot, mgrepl, mmalik, msvoboda, pm-eus, pmoravec, sgraf
Target Milestone: rcKeywords: ZStream
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: selinux-policy-3.7.19-126.el6_2.6 Doc Type: Bug Fix
Doc Text:
An incorrect SELinux policy prevented the qpidd service from starting. These selinux-policy packages contain updated SELinux rules, which allow the qpidd service to be started correctly.
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-02-13 19:03:41 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 769352    
Bug Blocks:    

Description RHEL Program Management 2012-01-31 12:07:05 UTC
This bug has been copied from bug #769352 and has been proposed
to be backported to 6.2 z-stream (EUS).

Comment 4 Miroslav Grepl 2012-01-31 15:19:24 UTC
Fixed in selinux-policy-3.7.19-126.el6_2.6

Comment 6 Frantisek Reznicek 2012-01-31 18:42:34 UTC
The issue is reliably fixed with selinux-policy-3.7.19-126.el6_2.6, retested on updated RHEL 6.2 i686 / x86_64.

-> VERIFIED

Comment 7 Miroslav Svoboda 2012-02-13 14:50:48 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
An incorrect SELinux policy prevented the qpidd service from starting. These selinux-policy packages contain updated SELinux rules, which allow the qpidd service to be started correctly.

Comment 8 errata-xmlrpc 2012-02-13 19:03:41 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0123.html