Bug 134456 - mDNSResponder starts in wrong SELinux domain
Summary: mDNSResponder starts in wrong SELinux domain
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: howl
Version: rawhide
Hardware: i686
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Alexander Larsson
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2004-10-02 22:29 UTC by Tom London
Modified: 2007-11-30 22:10 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2004-10-04 08:40:09 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Tom London 2004-10-02 22:29:49 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; rv:1.7.3) Gecko/20041002
Firefox/0.10.1

Description of problem:
mDNSResponder is starting in the incorrect SELinux context (user_t).

The problem is the use of
     su -s /bin/bash - nobody -c mDNSResponder $OTHER_MDNSRD_OPTS >
/dev/null

to start /usr/bin/mDNSResponder.

It should be replaced with
   runuser -s /bin/bash - nobody -c mDNSResponder $OTHER_MDNSRD_OPTS >
/dev/null



Version-Release number of selected component (if applicable):
howl-0.9.6-5

How reproducible:
Always

Steps to Reproduce:
1. boot system with SELinux/strict/enforcing
2. 'ps agxZ' | grep mDNS
3.
    

Expected Results:  mDNSResponder should be executing in howl_t

Additional info:

Comment 1 Alexander Larsson 2004-10-04 08:40:09 UTC
Fixed in 2.9.6-6.


Note You need to log in before you can comment on or make changes to this bug.