| Summary: | some pulp/rhui related daemons are running w/ an unconfined user | ||
|---|---|---|---|
| Product: | Red Hat Update Infrastructure for Cloud Providers | Reporter: | wes hayutin <whayutin> |
| Component: | Security | Assignee: | John Matthews <jmatthew> |
| Status: | CLOSED NOTABUG | QA Contact: | Kedar Bidarkar <kbidarka> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 2.0.2 | CC: | dwalsh, jslagle, sghai, whayutin |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2012-03-02 15:57:48 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Description
wes hayutin
2012-03-02 13:48:23 UTC
Dan would you comment on the fact we are seeing "httpd, qpidd, and mongod" showing up as "unconfined_u". Is this acceptable, or something we should address? We for the most part ignore the user component of the SELinux label. As we move forward and systemd starts more services this will not happen as often. http://danwalsh.livejournal.com/51942.html This will happen less often. But basically if you start a service with the serivce DAEMON start, the user component of the SELinux label will be your user type, if the service is started at boot it will be system_u. But up until now this has not been a problem. AS long as the third field is not unconfined_t, or initrc_t, then we do not have a problem. Released in RHUI 2.0.2 |