This service will be undergoing maintenance at 00:00 UTC, 2017-10-23 It is expected to last about 30 minutes
Bug 1203153 - SELinux prevents avahi from sending a D-bus message to pmwebd (a PCP service)
SELinux prevents avahi from sending a D-bus message to pmwebd (a PCP service)
Status: CLOSED ERRATA
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: selinux-policy (Show other bugs)
6.7
All Linux
medium Severity medium
: rc
: ---
Assigned To: Simon Sekidde
Milos Malik
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2015-03-18 05:34 EDT by Milos Malik
Modified: 2015-07-22 03:12 EDT (History)
8 users (show)

See Also:
Fixed In Version: selinux-policy-3.7.19-263.el6
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2015-07-22 03:12:39 EDT
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Milos Malik 2015-03-18 05:34:39 EDT
Description of problem:

Version-Release number of selected component (if applicable):
pcp-3.10.3-1.el6.x86_64
pcp-conf-3.10.3-1.el6.x86_64
pcp-libs-3.10.3-1.el6.x86_64
pcp-manager-3.10.3-1.el6.x86_64
pcp-webapi-3.10.3-1.el6.x86_64
selinux-policy-3.7.19-262.el6.noarch
selinux-policy-doc-3.7.19-262.el6.noarch
selinux-policy-minimum-3.7.19-262.el6.noarch
selinux-policy-mls-3.7.19-262.el6.noarch
selinux-policy-targeted-3.7.19-262.el6.noarch

How reproducible:
always

Steps to Reproduce:
1. install pcp-webapi package
2. make sure that avahi services are running
3. start the pmwebd service
4. search for USER_AVCs

Actual results:
----
type=USER_AVC msg=audit(03/18/2015 10:59:41.963:480) : user pid=2241 uid=dbus auid=unset ses=unset subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.33 spid=2256 tpid=30111 scontext=system_u:system_r:avahi_t:s0 tcontext=unconfined_u:system_r:pcp_pmwebd_t:s0 tclass=dbus  exe=/bin/dbus-daemon sauid=dbus hostname=? addr=? terminal=?' 
----

Expected results:
 * D-bus messages can go in both directions
Comment 5 errata-xmlrpc 2015-07-22 03:12:39 EDT
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-1375.html

Note You need to log in before you can comment on or make changes to this bug.