Bug 1511486 - selinux: ganesha.nfsd run in unconfined nfsd_t
Summary: selinux: ganesha.nfsd run in unconfined nfsd_t
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 28
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Lukas Vrabec
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1511489
TreeView+ depends on / blocked
 
Reported: 2017-11-09 12:54 UTC by Kaleb KEITHLEY
Modified: 2018-04-05 15:41 UTC (History)
5 users (show)

Fixed In Version:
Clone Of:
: 1511489 (view as bug list)
Environment:
Last Closed: 2018-04-05 15:41:55 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 1535906 0 medium CLOSED [NFS:RGW]: Unable to write on NFS mount, if selinux is enabled 2021-02-22 00:41:40 UTC

Internal Links: 1535906

Description Kaleb KEITHLEY 2017-11-09 12:54:42 UTC 
Description of problem:

nfs-ganesha is a userspace NFS server daemon. With every release of selinux-policy-targeted we find new AVCs that need to be addressed.

We had a conversation with Dan Walsh, and we agreed that, just like knfsd, ganesha.nfsd should run in an unconfined domain.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:
Comment 1 Fedora End Of Life 2018-02-20 15:26:33 UTC 
This bug appears to have been reported against 'rawhide' during the Fedora 28 development cycle.
Changing version to '28'.
Note You need to log in before you can comment on or make changes to this bug.