Bug 190885 - LTC23495-cvs is tagged in a way it can't be used with mls policy
Summary: LTC23495-cvs is tagged in a way it can't be used with mls policy
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy-mls
Version: 5
Hardware: powerpc
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Russell Coker
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-05-05 22:16 UTC by IBM Bug Proxy
Modified: 2007-11-30 22:11 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2006-09-15 16:52:32 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
IBM Linux Technology Center 23495 0 None None None Never

Description IBM Bug Proxy 2006-05-05 22:16:21 UTC
LTC Owner is: dmosby.com
LTC Originator is: krisw.com


Problem description: When CVS is installed it is tagged cvs_exec_t which 
apparently can't be executed in the MLS policy.

       Provide output from "uname -a", if possible:
Linux bladeracer2.ltc.austin.ibm.com 2.6.16-1.2139.2.1_FC6.lspp.18 #1 SMP Wed 
Apr 19 17:26:02 EDT 2006 ppc64 ppc64 ppc64 GNU/Linux

Hardware Environment
    Machine type (p650, x235, SF2, etc.):8842P1Z JS20 blade
    Cpu type (Power4, Power5, IA-64, etc.): Power 4
    Describe any special hardware you think might be relevant to this problem:

Please provide access information for the machine if it is available.

Is this reproducible?
    If so, how long does it (did it) take to reproduce it? 1 minute

The system has FC5 installed and then the configuration script for evaluation 
was run.  If you can't recreate this on a normal installation, contact me for 
more information about where to get this script and how to run it.  
 
Log into the system as a user who is a member of the wheel group, then:
/bin/su -
newrole -r sysadm_r
rpm -i cvs-1.11.21-3.2.ppc.rpm    (Successful)
cvs  (Permission denied)
ls -Z /usr/bin/cvs

-rwxr-xr-x  root  root  system_u:object_r:cvs_exec_t:SystemLow /usr/bin/cvs

chcon system_u:object_r:bin_t:SystemLow /usr/bin/cvs

cvs  (Successful)

Is the system (not just the application) hung?  No
    
Did the system produce an OOPS message on the console?  No

Is the system sitting in a debugger right now?  No

Additional information: /etc/selinux/config had SELINUX=enforcing and
SELINUXTYPE=MLS

Please mirror to Red Hat.

Comment 1 Daniel Walsh 2006-05-09 19:23:46 UTC
Fixed in selinux-policy-2.2.38-2

Comment 2 IBM Bug Proxy 2006-09-15 15:11:20 UTC
changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|TESTED                      |ACCEPTED




------- Additional Comments From krisw.com  2006-09-15 11:07 EDT -------
cvs is now tagged as :cvs_exec_t and works.  Thanks! 


Note You need to log in before you can comment on or make changes to this bug.