Bug 848833
Summary: | isnsd runs as initrc_t | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 7 | Reporter: | Milos Malik <mmalik> |
Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
Status: | CLOSED CURRENTRELEASE | QA Contact: | Milos Malik <mmalik> |
Severity: | medium | Docs Contact: | |
Priority: | unspecified | ||
Version: | 7.0 | CC: | mgrepl |
Target Milestone: | rc | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2014-06-13 09:59:00 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 877026 | ||
Bug Blocks: | 848829 |
Description
Milos Malik
2012-08-16 14:18:11 UTC
Fixed in selinux-policy-3.11.1-38.el7 Here is the only AVC that appeared in permissive mode: ---- type=SYSCALL msg=audit(10/30/2012 13:00:16.867:2948) : arch=x86_64 syscall=listen success=yes exit=0 a0=0x4 a1=0x80 a2=0x2 a3=0x7fff7c69260c items=0 ppid=1 pid=7252 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=isnsd exe=/usr/sbin/isnsd subj=system_u:system_r:isnsd_t:s0 key=(null) type=AVC msg=audit(10/30/2012 13:00:16.867:2948) : avc: denied { listen } for pid=7252 comm=isnsd lport=3205 scontext=system_u:system_r:isnsd_t:s0 tcontext=system_u:system_r:isnsd_t:s0 tclass=tcp_socket ---- Added to selinux-policy-3.11.1-48.fc18 commit 6d639b0810eb1ad573c8a3c05446f777b94ab8fb Author: Miroslav Grepl <mgrepl> Date: Mon Jun 24 16:13:55 2013 +0200 Allow isnsd listen on own tcp_socket This request was resolved in Red Hat Enterprise Linux 7.0. Contact your manager or support representative in case you have further questions about the request. |