Bug 835146
| Summary: | libselinux does not correctly support readonly mount point on RHEL6 | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Giuseppe Ragusa <giuseppe.ragusa> | ||||
| Component: | libselinux | Assignee: | Petr Lautrbach <plautrba> | ||||
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Milos Malik <mmalik> | ||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | 6.3 | CC: | dcleal, eparis, mmalik | ||||
| Target Milestone: | rc | ||||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2015-12-16 07:52:16 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
This request was not resolved in time for the current release. Red Hat invites you to ask your support representative to propose this request, if still desired, for consideration in the next release of Red Hat Enterprise Linux. This request was erroneously removed from consideration in Red Hat Enterprise Linux 6.4, which is currently under development. This request will be evaluated for inclusion in Red Hat Enterprise Linux 6.4. This request was evaluated by Red Hat Product Management for inclusion in the current release of Red Hat Enterprise Linux. Because the affected component is not scheduled to be updated in the current release, Red Hat is unable to address this request at this time. Red Hat invites you to ask your support representative to propose this request, if appropriate, in the next release of Red Hat Enterprise Linux. I believe this is already fixed in libselinux-2.0.94-5.6.el6 - https://rhn.redhat.com/errata/RHBA-2014-1469.html. If the problem persists for you feel free to reopen. |
Created attachment 594237 [details] LibSELinux patch for readonly mountpoint support Description of problem: SELinux library must treat a readonly mount point as a disabled SELinux to correctly work in LXC (probably chroot too) setups, otherwise problems occur with cronie (jobs do not run) and PAM (logins not allowed unless pam_selinux is commented out). Version-Release number of selected component (if applicable): libselinux-2.0.94-5.3.el6.src.rpm How reproducible: Set up a (albeit Technology Preview) libvirt-based LXC container (of "/sbin/init" type) and try to log in (locally or through SSH) or check scheduled cron jobs results. Steps to Reproduce: 1. 2. 3. Actual results: "Authentication failed" on login and errors in /var/log/cron Expected results: No errors and cron jobs / logins working. Additional info: Added patch from upstream (slightly edited in place) which seems to solve above problems.