Bug 1477960 – in RHEL 7.5 SELinux policy for Tomcat will deny access to rpm database and maybe to PostgreSQL as well

Bug 1477960 - in RHEL 7.5 SELinux policy for Tomcat will deny access to rpm database and maybe to PostgreSQL as well

Summary:	in RHEL 7.5 SELinux policy for Tomcat will deny access to rpm database and ma...

Status:	NEW

Aliases:	None

Product:	Spacewalk
Classification:	Community
Component:	Server (Show other bugs)
Sub Component:
Version:	2.6
Hardware:	Unspecified Unspecified

Priority	unspecified Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Tomáš Kašpárek
QA Contact:	Red Hat Satellite QA List
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:	1477887 1477948
Blocks:
	Show dependency tree / graph

Reported:	2017-08-03 06:20 EDT by Jan Hutař
Modified:	2017-08-03 06:20 EDT (History)
CC List:	0 users

See Also:
Fixed In Version:
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Jan Hutař 2017-08-03 06:20:35 EDT

Description of problem:
In RHEL 7.5 SELinux policy for Tomcat will deny access to rpm database (but maybe there will be a boolean to enable that). Same for PostgreSQL. We need to change Spacewalk policy to work with this.


Version-Release number of selected component (if applicable):
Spacewalk 2.7


How reproducible:
always


Steps to Reproduce:
1. Make sure Spacewalk works in Enforcing even when blocking bugs are resolved


Actual results:
It is possible that once these two blocking bugs are resolved, Tomcat in RHEL 7.5 might not be allowed to access rpm database and PostgreSQL port. That would break Spacewalk in Enforcing


Expected results:
Spacewalk have to work in Enforcing

Note You need to log in before you can comment on or make changes to this bug.