Bug 242893 - Wrong selinux context on /root after installing f7
Summary: Wrong selinux context on /root after installing f7
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: anaconda
Version: 7
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Anaconda Maintenance Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-06-06 09:31 UTC by Tobias Oed
Modified: 2007-11-30 22:12 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2007-06-06 14:30:13 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Tobias Oed 2007-06-06 09:31:28 UTC
Description of problem:
After installing f7 the /root directory has the wrong selinux security context:
system_u:object_r:default_t when it should be root:object_r:user_home_dir_t:s0. 
This leads to various avcs at boot. I have seen this on 3 systems out of which 2
were clean installs from the dvd (the third I don't know).

Version-Release number of selected component (if applicable):
What's on the f7 dvd

How reproducible:
not sure

Steps to Reproduce:
1. Install f7
2. boot

Actual results:
There are avcs in the logs:
avc: denied { search } for comm="procmail" dev=dm-0 egid=0 euid=0
exe="/usr/bin/procmail" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="root"
pid=4709 scontext=system_u:system_r:procmail_t:s0 sgid=0
subj=system_u:system_r:procmail_t:s0 suid=0 tclass=dir
tcontext=system_u:object_r:default_t:s0 tty=(none) uid=0

Expected results:
No avcs

Additional info:

restorecon -v /root

fixes the problem

Comment 1 Chris Lumens 2007-06-06 14:30:13 UTC
This should be fixed in the policycoreutils package in rawhide.


Note You need to log in before you can comment on or make changes to this bug.