Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
For bugs related to Red Hat Enterprise Linux 5 product line. The current stable release is 5.10. For Red Hat Enterprise Linux 6 and above, please visit Red Hat JIRA https://issues.redhat.com/secure/CreateIssue!default.jspa?pid=12332745 to report new issues.

Bug 1098031

Summary: zarafa-search runs as initrc_t (zarafa-search replaces zarafa-indexer)
Product: Red Hat Enterprise Linux 5 Reporter: Milos Malik <mmalik>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED ERRATA QA Contact: Milos Malik <mmalik>
Severity: medium Docs Contact:
Priority: medium    
Version: 5.11CC: dwalsh
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: selinux-policy-2.4.6-351.el5 Doc Type: Bug Fix
Doc Text:
The zarafa-indexer package has been replaced with the zarafa-search package. Previously, the zarafa-search utility was not labeled with the same SELinux context as the zarafa-indexer utility. With this update, the appropriate SELinux policy rules have been modified and zarafa-search now runs in the zarafa_indexer_t domain as expected.
 Story Points: ---
Clone Of: 1014226 Environment:
Last Closed: 2014-09-16 00:30:08 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Milos Malik 2014-05-15 06:45:34 UTC 
Description of problem:
zarafa-search package replaces zarafa-indexer package. Lets run zarafa-search in the same domain as zarafa-indexer.

Version-Release number of selected component (if applicable):
selinux-policy-2.4.6-350.el5
selinux-policy-devel-2.4.6-350.el5
selinux-policy-minimum-2.4.6-350.el5
selinux-policy-mls-2.4.6-350.el5
selinux-policy-strict-2.4.6-350.el5
selinux-policy-targeted-2.4.6-350.el5
zarafa-7.1.8-3.el5
zarafa-archiver-7.1.8-3.el5
zarafa-client-7.1.8-3.el5
zarafa-common-7.1.8-3.el5
zarafa-contacts-7.1.8-3.el5
zarafa-dagent-7.1.8-3.el5
zarafa-devel-7.1.8-3.el5
zarafa-gateway-7.1.8-3.el5
zarafa-ical-7.1.8-3.el5
zarafa-monitor-7.1.8-3.el5
zarafa-search-7.1.8-3.el5
zarafa-server-7.1.8-3.el5
zarafa-spooler-7.1.8-3.el5
zarafa-utils-7.1.8-3.el5
zarafa-webaccess-7.1.8-3.el5

How reproducible:
always

Steps to Reproduce:
# matchpathcon /usr/bin/zarafa-search 
/usr/bin/zarafa-search	system_u:object_r:bin_t
# rpm -qf /usr/bin/zarafa-search 
zarafa-search-7.1.8-3.el5
# service zarafa-search status
zarafa-search is stopped
# service zarafa-search start
Starting zarafa-search:                                    [  OK  ]
# service zarafa-search status
zarafa-search (pid  8150) is running...
# ps -efZ | grep zarafa
root:system_r:initrc_t          zarafa    8150     1  0 08:42 ?        00:00:00 /usr/bin/zarafa-search -c /etc/zarafa/search.cfg
root:system_r:unconfined_t:SystemLow-SystemHigh root 8166 4291  0 08:42 pts/0 00:00:00 grep zarafa
# 

Actual results:
 * zarafa-search runs as initrc_t

Expected results:
 * zarafa-search runs as zarafa_indexer_t
Comment 1 RHEL Program Management 2014-05-15 06:48:17 UTC 
This request was evaluated by Red Hat Product Management for inclusion
in a Red Hat Enterprise Linux release.  Product Management has
requested further review of this request by Red Hat Engineering, for
potential inclusion in a Red Hat Enterprise Linux release for currently
deployed products.  This request is not yet committed for inclusion in
a release.
Comment 7 errata-xmlrpc 2014-09-16 00:30:08 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2014-1205.html