Bug 1098031 - zarafa-search runs as initrc_t (zarafa-search replaces zarafa-indexer)
Summary: zarafa-search runs as initrc_t (zarafa-search replaces zarafa-indexer)
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: selinux-policy
Version: 5.11
Hardware: All
OS: Linux
medium
medium
Target Milestone: rc
: ---
Assignee: Miroslav Grepl
QA Contact: Milos Malik
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-05-15 06:45 UTC by Milos Malik
Modified: 2014-09-16 00:30 UTC (History)
1 user (show)

Fixed In Version: selinux-policy-2.4.6-351.el5
Doc Type: Bug Fix
Doc Text:
The zarafa-indexer package has been replaced with the zarafa-search package. Previously, the zarafa-search utility was not labeled with the same SELinux context as the zarafa-indexer utility. With this update, the appropriate SELinux policy rules have been modified and zarafa-search now runs in the zarafa_indexer_t domain as expected.
Clone Of: 1014226
Environment:
Last Closed: 2014-09-16 00:30:08 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2014:1205 0 normal SHIPPED_LIVE selinux-policy bug fix update 2014-09-16 04:16:46 UTC

Description Milos Malik 2014-05-15 06:45:34 UTC 
Description of problem:
zarafa-search package replaces zarafa-indexer package. Lets run zarafa-search in the same domain as zarafa-indexer.

Version-Release number of selected component (if applicable):
selinux-policy-2.4.6-350.el5
selinux-policy-devel-2.4.6-350.el5
selinux-policy-minimum-2.4.6-350.el5
selinux-policy-mls-2.4.6-350.el5
selinux-policy-strict-2.4.6-350.el5
selinux-policy-targeted-2.4.6-350.el5
zarafa-7.1.8-3.el5
zarafa-archiver-7.1.8-3.el5
zarafa-client-7.1.8-3.el5
zarafa-common-7.1.8-3.el5
zarafa-contacts-7.1.8-3.el5
zarafa-dagent-7.1.8-3.el5
zarafa-devel-7.1.8-3.el5
zarafa-gateway-7.1.8-3.el5
zarafa-ical-7.1.8-3.el5
zarafa-monitor-7.1.8-3.el5
zarafa-search-7.1.8-3.el5
zarafa-server-7.1.8-3.el5
zarafa-spooler-7.1.8-3.el5
zarafa-utils-7.1.8-3.el5
zarafa-webaccess-7.1.8-3.el5

How reproducible:
always

Steps to Reproduce:
# matchpathcon /usr/bin/zarafa-search 
/usr/bin/zarafa-search	system_u:object_r:bin_t
# rpm -qf /usr/bin/zarafa-search 
zarafa-search-7.1.8-3.el5
# service zarafa-search status
zarafa-search is stopped
# service zarafa-search start
Starting zarafa-search:                                    [  OK  ]
# service zarafa-search status
zarafa-search (pid  8150) is running...
# ps -efZ | grep zarafa
root:system_r:initrc_t          zarafa    8150     1  0 08:42 ?        00:00:00 /usr/bin/zarafa-search -c /etc/zarafa/search.cfg
root:system_r:unconfined_t:SystemLow-SystemHigh root 8166 4291  0 08:42 pts/0 00:00:00 grep zarafa
# 

Actual results:
 * zarafa-search runs as initrc_t

Expected results:
 * zarafa-search runs as zarafa_indexer_t
Comment 1 RHEL Program Management 2014-05-15 06:48:17 UTC 
This request was evaluated by Red Hat Product Management for inclusion
in a Red Hat Enterprise Linux release.  Product Management has
requested further review of this request by Red Hat Engineering, for
potential inclusion in a Red Hat Enterprise Linux release for currently
deployed products.  This request is not yet committed for inclusion in
a release.
Comment 7 errata-xmlrpc 2014-09-16 00:30:08 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2014-1205.html
Note You need to log in before you can comment on or make changes to this bug.