Bug 813959

Summary: Confusion between httpd_sys_rw_content_t and httpd_sys_script_rw_t
Product: [Fedora] Fedora Reporter: Tim Landscheidt <tim>
Component: selinux-policy-targetedAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED CANTFIX QA Contact: Ben Levenson <benl>
Severity: low Docs Contact:
Priority: unspecified    
Version: 16CC: dwalsh
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 812631
: 814708 (view as bug list) Environment:
Last Closed: 2012-04-20 12:20:34 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Tim Landscheidt 2012-04-18 20:53:24 UTC 
Description of problem:

Files in /etc/BackupPC have context httpd_sys_rw_content_t which restorecon wants to set to httpd_sys_script_rw_t but doesn't succeed.


Version-Release number of selected component (if applicable):

selinux-policy-3.10.0-80.fc16.noarch
selinux-policy-targeted-3.10.0-80.fc16.noarch


How reproducible:

Always.


Actual results:

| [root@passepartout ~]# restorecon -Rv /etc/BackupPC
| restorecon reset /etc/BackupPC context system_u:object_r:httpd_sys_rw_content_t:s0->system_u:object_r:httpd_sys_script_rw_t:s0
| restorecon reset /etc/BackupPC/config.pl context system_u:object_r:httpd_sys_rw_content_t:s0->system_u:object_r:httpd_sys_script_rw_t:s0
| restorecon reset /etc/BackupPC/hosts context system_u:object_r:httpd_sys_rw_content_t:s0->system_u:object_r:httpd_sys_script_rw_t:s0
| [root@passepartout ~]# restorecon -Rv /etc/BackupPC
| restorecon reset /etc/BackupPC context system_u:object_r:httpd_sys_rw_content_t:s0->system_u:object_r:httpd_sys_script_rw_t:s0
| restorecon reset /etc/BackupPC/config.pl context system_u:object_r:httpd_sys_rw_content_t:s0->system_u:object_r:httpd_sys_script_rw_t:s0
| restorecon reset /etc/BackupPC/hosts context system_u:object_r:httpd_sys_rw_content_t:s0->system_u:object_r:httpd_sys_script_rw_t:s0
| [root@passepartout ~]#


Expected results:

restorecon should succeed.


Additional info:

| [root@passepartout ~]# semanage -o -
| boolean -D
| boolean -1 fcron_crond
| boolean -1 httpd_enable_homedirs
| login -D
| login -a -s unconfined_u -r 's0-s0:c0.c1023' __default__
| login -a -s unconfined_u -r 's0-s0:c0.c1023' root
| login -a -s system_u -r 's0-s0:c0.c1023' system_u
| user -D
| port -D
| interface -D
| node -D
| fcontext -D
| [root@passepartout ~]#
Comment 1 Miroslav Grepl 2012-04-20 12:20:34 UTC 
It needs to be fixed in the BackupPC policy.