Bug 1019299 - execmod denied
Summary: execmod denied
Keywords:
Status: CLOSED DUPLICATE of bug 1020295
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: selinux-policy
Version: 7.0
Hardware: s390x
OS: Linux
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Miroslav Grepl
QA Contact: Milos Malik
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-10-15 12:47 UTC by Karel Volný
Modified: 2013-10-24 13:12 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-10-21 13:49:19 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Karel Volný 2013-10-15 12:47:15 UTC
Description of problem:
Running the test /CoreOS/cyrus-imapd/Regression/bz484377-replication-segfault on s390x I'm getting errors like these:

----
time->Tue Oct 15 03:01:45 2013
type=SYSCALL msg=audit(1381802505.658:650): arch=80000016 syscall=125 success=no exit=-13 a0=3fff9538000 a1=6000 a2=5 a3=0 items=0 ppid=45304 pid=45353 auid=4294967295 uid=76 gid=12 euid=76 suid=76 fsuid=76 egid=12 sgid=12 fsgid=12 tty=(none) ses=4294967295 comm="imapd" exe="/usr/lib/cyrus-imapd/imapd" subj=system_u:system_r:cyrus_t:s0 key=(null)
type=AVC msg=audit(1381802505.658:650): avc:  denied  { execmod } for  pid=45353 comm="imapd" path="/usr/lib64/sasl2/libsasldb.so.3.0.0" dev="dm-2" ino=33596938 scontext=system_u:system_r:cyrus_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
----

Dan says[*] I should report a bug, so here it is :-)

[*] http://danwalsh.livejournal.com/6117.html?thread=23525


Version-Release number of selected component (if applicable):
cyrus-imapd-2.4.17-5.el7.s390x

How reproducible:
haven't retried

Steps to Reproduce:
1. schedule the test /CoreOS/cyrus-imapd/Regression/bz484377-replication-segfault

Actual results:
http://lab-02.rhts.eng.bos.redhat.com/beaker/logs/results/82842+/82842821/test_log-Testing-avc.log

Expected results:
no such denials

Additional info:

Comment 2 Miroslav Grepl 2013-10-21 13:49:19 UTC

*** This bug has been marked as a duplicate of bug 1020295 ***


Note You need to log in before you can comment on or make changes to this bug.