Bug 1038567 - disable=1 line in setrans.conf has no effect
Summary: disable=1 line in setrans.conf has no effect
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: selinux-policy
Version: 7.0
Hardware: All
OS: Linux
high
medium
Target Milestone: rc
: ---
Assignee: Miroslav Grepl
QA Contact: Milos Malik
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-12-05 11:06 UTC by Milos Malik
Modified: 2014-06-18 02:32 UTC (History)
1 user (show)

Fixed In Version: selinux-policy-3.12.1-126.el7
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-06-13 12:15:06 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Milos Malik 2013-12-05 11:06:59 UTC 
Description of problem:
The setrans.conf file contains following lines:

# Uncomment the following to disable translation libary
# disable=1

Version-Release number of selected component (if applicable):
mcstrans-0.3.4-3.el7.x86_64
selinux-policy-3.12.1-108.el7.noarch
selinux-policy-targeted-3.12.1-108.el7.noarch
selinux-policy-doc-3.12.1-108.el7.noarch
selinux-policy-devel-3.12.1-108.el7.noarch
selinux-policy-minimum-3.12.1-108.el7.noarch
selinux-policy-mls-3.12.1-108.el7.noarch

How reproducible:
always

Steps to Reproduce:
1. uncomment following line in /etc/selinux/targeted/setrans.conf
# disable=1
2. restart mcstransd
3. ls -dZ .

Actual results:
dr-xr-x---. root root system_u:object_r:admin_home_t:SystemLow .

Expected results:
Either the output of "ls -dZ ." is
dr-xr-x---. root root system_u:object_r:admin_home_t:s0 .

or the "disable=1" line is removed from the setrans.conf file.
Comment 1 Miroslav Grepl 2014-02-03 13:12:19 UTC 
I will remove it from setrans.conf. It also does not work on RHEL6.
Comment 4 Ludek Smid 2014-06-13 12:15:06 UTC 
This request was resolved in Red Hat Enterprise Linux 7.0.

Contact your manager or support representative in case you have further questions about the request.
Note You need to log in before you can comment on or make changes to this bug.