Hide Forgot
Description of problem: The libstoragemgmt package comes from EPEL, but the daemon is already confined in RHEL-7. Version-Release number of selected component (if applicable): libstoragemgmt-0.0.22-1.el6.i686 libstoragemgmt-ibm-v7k-plugin-0.0.22-1.el6.noarch libstoragemgmt-netapp-plugin-0.0.22-1.el6.noarch libstoragemgmt-nstor-plugin-0.0.22-1.el6.noarch libstoragemgmt-python-0.0.22-1.el6.noarch libstoragemgmt-smis-plugin-0.0.22-1.el6.noarch libstoragemgmt-targetd-plugin-0.0.22-1.el6.noarch selinux-policy-3.7.19-213.el6.noarch selinux-policy-doc-3.7.19-213.el6.noarch selinux-policy-minimum-3.7.19-213.el6.noarch selinux-policy-mls-3.7.19-213.el6.noarch selinux-policy-targeted-3.7.19-213.el6.noarch How reproducible: always Steps to Reproduce: # run_init service libstoragemgmtd status Authenticating root. Password: lsmd is stopped # run_init service libstoragemgmtd start Authenticating root. Password: Starting lsmd daemon: [ OK ] # run_init service libstoragemgmtd status Authenticating root. Password: lsmd (pid 5154) is running... # ps -efZ | grep lsmd system_u:system_r:initrc_t:s0 456 5154 1 0 14:20 ? 00:00:00 /usr/bin/lsmd unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 root 5170 3019 0 14:20 pts/0 00:00:00 grep lsmd # Actual results: * lsmd runs as initrc_t Expected results: * lsmd runs in its own SELinux domain
Patch sent to Miroslav.
commit 86c625bad7943a135c5861c68781b7312127ac0e Author: Lukas Vrabec <lvrabec> Date: Thu Apr 24 12:06:08 2014 +0200 Added lsm policy
sent patch
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2014-1568.html