Bug 1397713 - semanage does not always report errors when adding/removing hard-wired fcontext patterns
Summary: semanage does not always report errors when adding/removing hard-wired fconte...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: policycoreutils
Version: 6.9
Hardware: x86_64
OS: Linux
medium
medium
Target Milestone: rc
: ---
Assignee: Petr Lautrbach
QA Contact: Milos Malik
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-11-23 08:53 UTC by Milos Malik
Modified: 2016-11-29 09:40 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1396902
Environment:
Last Closed: 2016-11-24 13:00:08 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Milos Malik 2016-11-23 08:53:47 UTC
Description of problem:
* if the fcontext pattern is defined in policy then adding the same pattern should always result in an error message
* if the fcontext pattern is defined in policy and cannot be deleted then every attempt to remove such fcontext pattern should result in an error message

Version-Release number of selected component (if applicable):
policycoreutils-python-2.0.83-30.1.el6_8.x86_64
policycoreutils-2.0.83-30.1.el6_8.x86_64

How reproducible:
* always

Steps to Reproduce:
# semanage fcontext -l | grep /var/log/httpd
/var/log/httpd(/.*)?                               all files          system_u:object_r:httpd_log_t:s0 
# semanage fcontext -a -t httpd_log_t '/var/log/httpd(/.*)?'
libsemanage.dbase_llist_query: could not query record value (No such file or directory).
# semanage fcontext -a -t httpd_log_t '/var/log/httpd(/.*)?'
# semanage fcontext -a -t httpd_log_t '/var/log/httpd(/.*)?'
# semanage fcontext -l | grep /var/log/httpd
/var/log/httpd(/.*)?                               all files          system_u:object_r:httpd_log_t:s0 
# semanage fcontext -d -t httpd_log_t '/var/log/httpd(/.*)?'
# semanage fcontext -d -t httpd_log_t '/var/log/httpd(/.*)?'
/usr/sbin/semanage: File context for /var/log/httpd(/.*)? is defined in policy, cannot be deleted
# semanage fcontext -d -t httpd_log_t '/var/log/httpd(/.*)?'
/usr/sbin/semanage: File context for /var/log/httpd(/.*)? is defined in policy, cannot be deleted
#

Comment 1 Petr Lautrbach 2016-11-24 13:00:08 UTC
Red Hat Enterprise Linux version 6 is in the Production 2 phase of its lifetime and this bug doesn't meet the criteria for it, i.e. only high severity issues will be fixed. Please see https://access.redhat.com/support/policy/updates/errata/ for further information.

This issue is fixed in Red Hat Enterprise Linux version 7.

Comment 2 Petr Lautrbach 2016-11-29 09:40:21 UTC
I was wrong. This is actually a correct behavior, see https://bugzilla.redhat.com/show_bug.cgi?id=1398427


Note You need to log in before you can comment on or make changes to this bug.