Bug 1323954 - [RFE] Add policy for local certificates used by plasma networkmanagement
Summary: [RFE] Add policy for local certificates used by plasma networkmanagement
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 23
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
Assignee: Lukas Vrabec
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-04-05 07:35 UTC by Jan Grulich
Modified: 2016-04-19 01:22 UTC (History)
7 users (show)

Fixed In Version: selinux-policy-3.13.1-158.14.fc23
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-04-19 01:22:05 UTC
Type: Bug

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
KDE Software Compilation 360482 0 None None None 2016-04-05 07:35:33 UTC

Description Jan Grulich 2016-04-05 07:35:34 UTC 
Description of problem:
When importing OpenVPN connections in plasma networkmanagement we copy (if user wants to) certificates to "$HOME/.local/share/networkmanagement/certificates/" directory, but this copy changes selinux context which makes the new imported connection not to work. 

As discussed with Miroslav Grepl, a rule to selinux-policy could be added to avoid this problem.
Comment 4 Lukas Vrabec 2016-04-05 21:09:17 UTC 
commit 591897c453695da2055f7a2d689579ed4a7517b3
Author: Lukas Vrabec <lvrabec>
Date:   Tue Apr 5 15:04:46 2016 +0200

    Allow unconfined_t to create ~/.local/share/networkmanagement/certificates/ as home_cert_t instead of data_home_t.
Comment 5 Fedora Update System 2016-04-11 11:03:50 UTC 
selinux-policy-3.13.1-158.14.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2016-3fade554b0
Comment 6 Fedora Update System 2016-04-13 09:28:44 UTC 
selinux-policy-3.13.1-158.14.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-3fade554b0
Comment 7 Fedora Update System 2016-04-19 01:21:49 UTC 
selinux-policy-3.13.1-158.14.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.
Note You need to log in before you can comment on or make changes to this bug.