Bug 791294

Summary: SELinux prevents clustered qpidd (qpidd_t) from name_connect (tcp_socket, amqp_port_t)
Product: Red Hat Enterprise Linux 6 Reporter: Frantisek Reznicek <freznice>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED ERRATA QA Contact: Frantisek Reznicek <freznice>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 6.2CC: dwalsh, ebenes, esammons, iboverma, jpallich, mmalik, msvoboda
Target Milestone: rcKeywords: ZStream
Target Release: 6.2   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
An incorrect SELinux policy prevented the qpidd service from connecting to the AMQP (Advanced Message Queuing Protocol) port when the qpidd daemon was configured with Corosync clustering. These selinux-policy packages contain updated SELinux rules, which allow the qpidd service to be started correctly.
Story Points: ---
Clone Of: 786467 Environment:
Last Closed: 2012-06-20 12:31:30 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 786467    
Bug Blocks: 796331    

Comment 1 Frantisek Reznicek 2012-02-16 16:41:03 UTC
Proposing bug for 6.2.Z stream as the same AVC was detected on 6.2 running qpidd in cluster.

Comment 7 Miroslav Svoboda 2012-03-02 14:22:36 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
An incorrect SELinux policy prevented the qpidd service from connecting to the AMQP (Advanced Message Queuing Protocol) port when the qpidd daemon was configured with Corosync clustering. These selinux-policy packages contain updated SELinux rules, which allow the qpidd service to be started correctly.

Comment 8 Frantisek Reznicek 2012-03-07 13:03:39 UTC
Issue has been reliably fixed on both
- RHEL 6.3.0 (selinux-policy-3.7.19-138.el6) i686 / x86_64 / s390x / ppc64
- RHEL 6.2.z (selinux-policy-3.7.19-126.el6_2.10) i686 / x86_64

for both brokers (qpidd, matahari-broker)

-> VERIFIED

Comment 9 errata-xmlrpc 2012-06-20 12:31:30 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0780.html