Bug 1008386 - AVC during packages installation: avc: denied { read } for pid=24489 comm="httpd" name="webservices.wsgi"
Summary: AVC during packages installation: avc: denied { read } for pid=24489 comm=...
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Subscription Asset Manager
Classification: Retired
Component: katello
Version: 1.3
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Katello Bug Bin
QA Contact: SAM QE List
URL:
Whiteboard:
Depends On:
Blocks: sam20-tracker
TreeView+ depends on / blocked
 
Reported: 2013-09-16 09:56 UTC by Jan Hutař
Modified: 2017-06-26 20:35 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-06-26 20:35:56 UTC
Embargoed:


Attachments (Terms of Use)

Description Jan Hutař 2013-09-16 09:56:36 UTC
Description of problem:
SELinux AVC error message emitted when installing SAM 1.3 + Splice packages.


Version-Release number of selected component (if applicable):
SAM 1.3 snapshot #6 + Splice


How reproducible:
2 of 2 attempts


Steps to Reproduce:
1. # yum install -y katello-headpin-all splice spacewalk-splice-tool ruby193-rubygem-splice_reports
2. Check /var/log/audit/audit.log


Actual results:
time->Mon Sep 16 05:14:28 2013
type=SYSCALL msg=audit(1379322868.261:94): arch=c000003e syscall=2 success=no exit=-13 a0=7f6a17d529c0 a1=0 a2=1b6 a3=0 items=0 ppid=24487 pid=24489 auid=4294967295 uid=48 gid=497 euid=48 suid=48 fsuid=48 egid=497 sgid=497 fsgid=497 tty=(none) ses=4294967295 comm="httpd" exe="/usr/sbin/httpd" subj=unconfined_u:system_r:httpd_t:s0 key=(null)
type=AVC msg=audit(1379322868.261:94): avc:  denied  { read } for  pid=24489 comm="httpd" name="webservices.wsgi" dev=dm-0 ino=1833277 scontext=unconfined_u:system_r:httpd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file


Expected results:
No AVCs should be caused


Additional info:
# find / -inum 1833277
/srv/splice/webservices.wsgi
# ls -Z /srv/splice/webservices.wsgi
-rw-r--r--. apache apache system_u:object_r:httpd_sys_content_t:s0 /srv/splice/webservices.wsgi
# restorecon -vR /srv/splice/webservices.wsgi
# echo $?
0

Comment 1 Bryan Kearney 2017-06-26 20:35:56 UTC
The release of Satellite 5.8 we are deprecating the support of Subscription Asset Manager. The release notes for 5.8 can be found at https://access.redhat.com/documentation/en-us/red_hat_satellite/5.8/pdf/release_notes/Red_Hat_Satellite-5.8-Release_Notes-en-US.pdf.

I am therefore closing out this bug as WONTFIX. If you believe this to be an error, please feel free tor each out to either Rich Jerrido or Bryan Kearney. Thank you!


Note You need to log in before you can comment on or make changes to this bug.