Bug 876921

Summary:	ldirectord runs as initrc_t
Product:	Red Hat Enterprise Linux 7	Reporter:	Milos Malik <mmalik>
Component:	selinux-policy	Assignee:	Miroslav Grepl <mgrepl>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Milos Malik <mmalik>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	7.0	CC:	mgrepl
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-06-13 09:23:07 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	877026
Bug Blocks:	848829, 1042767

Description Milos Malik 2012-11-15 10:08:38 UTC

Description of problem:


Version-Release number of selected component (if applicable):
ldirectord-3.9.2-4.el7.x86_64
selinux-policy-3.11.1-51.el7.noarch
selinux-policy-devel-3.11.1-51.el7.noarch
selinux-policy-doc-3.11.1-51.el7.noarch
selinux-policy-minimum-3.11.1-51.el7.noarch
selinux-policy-mls-3.11.1-51.el7.noarch
selinux-policy-targeted-3.11.1-51.el7.noarch

How reproducible:
always

Steps to Reproduce:
# cp /usr/share/doc/ldirectord-3.9.2/ldirectord.cf /etc/ha.d/
# service ldirectord start
Starting ldirectord (via systemctl):                       [  OK  ]
# service ldirectord status
Subroutine main::pack_sockaddr_in6 redefined at /usr/share/perl5/Exporter.pm line 66.
 at /usr/sbin/ldirectord line 831.
Subroutine main::unpack_sockaddr_in6 redefined at /usr/share/perl5/Exporter.pm line 66.
 at /usr/sbin/ldirectord line 831.
Subroutine main::sockaddr_in6 redefined at /usr/share/perl5/Exporter.pm line 66.
 at /usr/sbin/ldirectord line 831.
Subroutine main::pack_sockaddr_in6 redefined at /usr/sbin/ldirectord line 3060.
Subroutine main::unpack_sockaddr_in6 redefined at /usr/sbin/ldirectord line 3060.
Subroutine main::sockaddr_in6 redefined at /usr/sbin/ldirectord line 3060.
Subroutine main::pack_sockaddr_in6 redefined at /usr/share/perl5/Exporter.pm line 66.
 at /usr/sbin/ldirectord line 831.
Subroutine main::unpack_sockaddr_in6 redefined at /usr/share/perl5/Exporter.pm line 66.
 at /usr/sbin/ldirectord line 831.
Subroutine main::sockaddr_in6 redefined at /usr/share/perl5/Exporter.pm line 66.
 at /usr/sbin/ldirectord line 831.
Subroutine main::pack_sockaddr_in6 redefined at /usr/sbin/ldirectord line 3060.
Subroutine main::unpack_sockaddr_in6 redefined at /usr/sbin/ldirectord line 3060.
Subroutine main::sockaddr_in6 redefined at /usr/sbin/ldirectord line 3060.
ldirectord for /etc/ha.d/ldirectord.cf is running with pid: 2832
# ps -efZ | grep initrc_t
system_u:system_r:initrc_t:s0   root      2832     1  0 11:05 ?        00:00:00 /usr/bin/perl -w /usr/sbin/ldirectord start
unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 root 2862 1512  0 11:05 pts/0 00:00:00 grep --color=auto initrc_t
#

Actual results:
 * ldirectord runs as initrc_t

Expected results:
 * ldirectord runs in its own SELinux domain

Comment 3 Miroslav Grepl 2013-06-24 18:35:49 UTC

Milos, 
how about to treat it with piranha-lvs policy.

# chcon -t piranha_lvs_exec_t /usr/sbin/ldirectord

Comment 4 Miroslav Grepl 2013-06-24 18:37:08 UTC

Also what does

# rpm -qf /usr/sbin/ldirectord

Comment 5 Milos Malik 2013-06-25 04:05:15 UTC

# rpm -qf /usr/sbin/ldirectord 
ldirectord-3.9.5-6.x86_64
# yum list ldirectord
Installed Packages
ldirectord.x86_64               3.9.5-6               @RHEL-7.0-HighAvailability
#

Comment 6 Miroslav Grepl 2013-06-25 09:06:38 UTC

Actually I am going to treat it with cluster_t. Fixes added to Fedora.

Comment 8 Ludek Smid 2014-06-13 09:23:07 UTC

This request was resolved in Red Hat Enterprise Linux 7.0.

Contact your manager or support representative in case you have further questions about the request.