Bug 1030035 - inconsistent label for /etc/dnsmasq.d
Summary: inconsistent label for /etc/dnsmasq.d
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted
Version: 19
Hardware: Unspecified
OS: Linux
unspecified
low
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Ben Levenson
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-11-13 19:07 UTC by Cristian Ciupitu
Modified: 2014-02-17 21:08 UTC (History)
1 user (show)

Fixed In Version: selinux-policy-3.12.1-74.18.fc19
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-02-17 21:08:09 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Cristian Ciupitu 2013-11-13 19:07:06 UTC
Description of problem:
dnsmasq uses extra configuration files which are stored under
/etc/dnsmasq.d as shown at the end of /etc/dnsmasq.conf:

    # Include another lot of configuration options.
    #conf-file=/etc/dnsmasq.more.conf
    conf-dir=/etc/dnsmasq.d

The default label used for those files is etc_t, whereas the label for
the main file is dnsmasq_etc_t. This is inconsistent.

Version-Release number of selected component (if applicable):
selinux-policy-targeted-3.12.1-74.11.fc19.noarch

How reproducible:
Every time

Steps to Reproduce:
1. Run:
    matchpathcon /etc/dnsmasq.conf 
    matchpathcon /etc/dnsmasq.d/test.conf

Actual results:
/etc/dnsmasq.conf         system_u:object_r:dnsmasq_etc_t:s0
/etc/dnsmasq.d/test.conf  system_u:object_r:etc_t:s0

Expected results:
/etc/dnsmasq.conf         system_u:object_r:dnsmasq_etc_t:s0
/etc/dnsmasq.d/test.conf  system_u:object_r:dnsmasq_etc_t:s0

Additional info:
dnsmasq-2.66-10.fc19.x86_64

Comment 1 Daniel Walsh 2013-11-13 21:31:51 UTC
3dc0d3970a47395dd1f446a532ed150615bfc3ed
2ed1ade4626e25403c403f9962a8605c344c349b

Fix this,  Needs to be back ported to RHEL7 also.

Comment 2 Fedora Update System 2014-02-11 22:10:41 UTC
selinux-policy-3.12.1-74.18.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/selinux-policy-3.12.1-74.18.fc19

Comment 3 Fedora Update System 2014-02-12 14:50:58 UTC
Package selinux-policy-3.12.1-74.18.fc19:
* should fix your issue,
* was pushed to the Fedora 19 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing selinux-policy-3.12.1-74.18.fc19'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2014-2409/selinux-policy-3.12.1-74.18.fc19
then log in and leave karma (feedback).

Comment 4 Fedora Update System 2014-02-17 21:08:09 UTC
selinux-policy-3.12.1-74.18.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.