Bug 801015
Summary: | matahari-qmf-rpcd runs as initrc_t | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 6 | Reporter: | Milos Malik <mmalik> |
Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
Status: | CLOSED ERRATA | QA Contact: | Milos Malik <mmalik> |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | 6.2 | CC: | dwalsh |
Target Milestone: | rc | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | selinux-policy-3.7.19-142.el6 | Doc Type: | Bug Fix |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2012-06-20 12:31:54 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 832330 |
Description
Milos Malik
2012-03-07 14:29:39 UTC
Please fix also following matahari* AVCs: ---- time->Wed Mar 7 16:25:07 2012 type=SYSCALL msg=audit(1331133907.378:185): arch=40000003 syscall=156 success=yes exit=0 a0=2439 a1=0 a2=bf8982c8 a3=b78b47a0 items=0 ppid=1 pid=9273 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="matahari-qmf-ho" exe="/usr/sbin/matahari-qmf-hostd" subj=unconfined_u:system_r:matahari_hostd_t:s0 key=(null) type=AVC msg=audit(1331133907.378:185): avc: denied { setsched } for pid=9273 comm="matahari-qmf-ho" scontext=unconfined_u:system_r:matahari_hostd_t:s0 tcontext=unconfined_u:system_r:matahari_hostd_t:s0 tclass=process type=AVC msg=audit(1331133907.378:185): avc: denied { sys_nice } for pid=9273 comm="matahari-qmf-ho" capability=23 scontext=unconfined_u:system_r:matahari_hostd_t:s0 tcontext=unconfined_u:system_r:matahari_hostd_t:s0 tclass=capability ---- time->Wed Mar 7 16:25:17 2012 type=SYSCALL msg=audit(1331133917.891:186): arch=40000003 syscall=156 success=yes exit=0 a0=24da a1=0 a2=bfda4638 a3=b77577a0 items=0 ppid=1 pid=9434 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="matahari-qmf-ne" exe="/usr/sbin/matahari-qmf-networkd" subj=unconfined_u:system_r:matahari_netd_t:s0 key=(null) type=AVC msg=audit(1331133917.891:186): avc: denied { setsched } for pid=9434 comm="matahari-qmf-ne" scontext=unconfined_u:system_r:matahari_netd_t:s0 tcontext=unconfined_u:system_r:matahari_netd_t:s0 tclass=process type=AVC msg=audit(1331133917.891:186): avc: denied { sys_nice } for pid=9434 comm="matahari-qmf-ne" capability=23 scontext=unconfined_u:system_r:matahari_netd_t:s0 tcontext=unconfined_u:system_r:matahari_netd_t:s0 tclass=capability ---- time->Wed Mar 7 16:25:36 2012 type=SYSCALL msg=audit(1331133936.120:190): arch=40000003 syscall=156 success=yes exit=0 a0=2616 a1=0 a2=bf97bd28 a3=b78157a0 items=0 ppid=1 pid=9750 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="matahari-qmf-se" exe="/usr/sbin/matahari-qmf-serviced" subj=unconfined_u:system_r:matahari_serviced_t:s0 key=(null) type=AVC msg=audit(1331133936.120:190): avc: denied { setsched } for pid=9750 comm="matahari-qmf-se" scontext=unconfined_u:system_r:matahari_serviced_t:s0 tcontext=unconfined_u:system_r:matahari_serviced_t:s0 tclass=process type=AVC msg=audit(1331133936.120:190): avc: denied { sys_nice } for pid=9750 comm="matahari-qmf-se" capability=23 scontext=unconfined_u:system_r:matahari_serviced_t:s0 tcontext=unconfined_u:system_r:matahari_serviced_t:s0 tclass=capability ---- time->Wed Mar 7 16:25:45 2012 type=SYSCALL msg=audit(1331133945.752:191): arch=40000003 syscall=156 success=no exit=-13 a0=26a9 a1=0 a2=bfa367b8 a3=b77399d0 items=0 ppid=1 pid=9897 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="matahari-qmf-sy" exe="/usr/sbin/matahari-qmf-sysconfigd" subj=unconfined_u:system_r:matahari_sysconfigd_t:s0 key=(null) type=AVC msg=audit(1331133945.752:191): avc: denied { setsched } for pid=9897 comm="matahari-qmf-sy" scontext=unconfined_u:system_r:matahari_sysconfigd_t:s0 tcontext=unconfined_u:system_r:matahari_sysconfigd_t:s0 tclass=process type=AVC msg=audit(1331133945.752:191): avc: denied { sys_nice } for pid=9897 comm="matahari-qmf-sy" capability=23 scontext=unconfined_u:system_r:matahari_sysconfigd_t:s0 tcontext=unconfined_u:system_r:matahari_sysconfigd_t:s0 tclass=capability ---- Added to selinux-policy-3.7.19-141.el6 Milos could you test it with this policy Fixed in selinux-policy-3.7.19-142.el6 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2012-0780.html |