Bug 809648

Summary: in follow up to Redhat case#00618469. application functions only when SELINUX is set to permissive
Product: Red Hat Enterprise Linux 5 Reporter: i_ajay_1999
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED INSUFFICIENT_DATA QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 5.7CC: dwalsh
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-03-19 14:48:14 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description i_ajay_1999 2012-04-03 22:53:54 UTC 
in follow up to Redhat case#00618469. application functions only when SELINUX is set to permissive.

we tried the following:

1. turned on httpd_unified boolean

2. built custom module and now cat audit.log |allow2audit -alR does not show any messages.

  But, still application works only in permissive mode.
  No, selinux error in the either messages or audit.log file but application works in permissive mode ony. Kernel has booted in audit=1 mode.

please look at case#00618469 for more details.
Comment 2 Miroslav Grepl 2012-04-04 08:52:00 UTC 
Could you try to test it with

# semodule -DB

which will turn off dontaudit rules.
Comment 4 Daniel Walsh 2012-04-05 15:47:52 UTC 
i_ajay_1999

Who are you working this with from Red Hat, I would like to add them to the bugzilla.
Comment 5 i_ajay_1999 2012-04-05 16:31:03 UTC 
Simon Sek. was the redhat engineer working this case...thx-ajay
Comment 6 i_ajay_1999 2012-04-05 21:40:22 UTC 
doing "semodule -DB"  and running the job in enrocing mode (it failed) and in permissive mode (was successful) did not create any logs either in /var/log/messages or in audit.log.
Comment 7 Miroslav Grepl 2012-04-06 06:32:18 UTC 
Is auditd running?
Comment 8 i_ajay_1999 2012-04-16 18:57:36 UTC 
Yes
Comment 9 Miroslav Grepl 2012-07-16 08:42:42 UTC 
Does it still persist?
Comment 10 Miroslav Grepl 2013-03-19 14:48:14 UTC 
I am going to close this bug. If the problem still persists, please reopen the bug. Thank you.