Bug 1018314 - Cannot change a user's home directory SELinux label via the use of an selinux module
Summary: Cannot change a user's home directory SELinux label via the use of an selinux...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: libsemanage
Version: 6.4
Hardware: Unspecified
OS: Linux
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Petr Lautrbach
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-10-11 16:50 UTC by rlopez
Modified: 2016-11-02 17:03 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-11-02 17:03:45 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description rlopez 2013-10-11 16:50:30 UTC
Description of problem:

Currently working with Dan Walsh on creating a Oracle SELinux policy, and one of the issues encountered is trying to change the SELinux label of Oracle's oradiag_oracle folder located in its homedir from user_home_t to oracle_log_t. Apparently, homedir labeling happens after module labeling.

Within the oracle.fc file ,
/home/oracle/oradiag_oracle(.*/)?                                       gen_context(system_u:object_r:oracle_log_t,s0)

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 3 Daniel Walsh 2013-10-11 19:51:04 UTC
Should be

/home/oracle/oradiag_oracle(/.*)?                                       gen_context(system_u:object_r:oracle_log_t,s0)

One potential change to fix this for now would be

HOME_DIR/oradiag_oracle(/.*)? 

Which would cause this label to apply to all users.

Comment 4 RHEL Program Management 2013-10-13 23:00:23 UTC
This request was evaluated by Red Hat Product Management for
inclusion in the current release of Red Hat Enterprise Linux.
Because the affected component is not scheduled to be updated
in the current release, Red Hat is unable to address this
request at this time.

Red Hat invites you to ask your support representative to
propose this request, if appropriate, in the next release of
Red Hat Enterprise Linux.

Comment 6 Petr Lautrbach 2016-11-02 17:03:45 UTC
Red Hat Enterprise Linux version 6 is entering the Production 2 phase of its lifetime and this bug doesn't meet the criteria for it, i.e. only high severity issues will be fixed. Please see https://access.redhat.com/support/policy/updates/errata/ for further information.

Feel free to clone this bug to RHEL-7 if this is still issue for you.


Note You need to log in before you can comment on or make changes to this bug.