Bug 460971 - "semanage translation -a" causes denials; setrans.conf mode changed
Summary: "semanage translation -a" causes denials; setrans.conf mode changed
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: policycoreutils
Version: rawhide
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-09-03 02:45 UTC by Murray McAllister
Modified: 2015-01-04 22:35 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2008-09-05 15:29:56 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
AVC denials (5.60 KB, text/plain)
2008-09-03 02:47 UTC, Murray McAllister
no flags Details

Description Murray McAllister 2008-09-03 02:45:36 UTC
Description of problem:

Running "semanage translation -a -T Secret s0:c2" causes denials and
setrans.conf mode changes.

Version-Release number of selected component (if applicable):

* Fedora release 9.90.1 (Rawhide)

* policycoreutils-2.0.55-1.fc10.i386

* libselinux-2.0.71-1.fc10.i386
* selinux-policy-mls-3.5.5-3.fc10.noarch
* libselinux-python-2.0.71-1.fc10.i386
* selinux-policy-targeted-3.5.5-3.fc10.noarch
* selinux-policy-3.5.5-3.fc10.noarch

SELinux status:                 enabled
SELinuxfs mount:                /selinux
Current mode:                   enforcing
Mode from config file:          enforcing
Policy version:                 23
Policy from config file:        targeted

How reproducible:
Always

Steps to Reproduce:
1. ls -l /etc/selinux/targeted/setrans.conf 
-rw-r--r-- 1 root root 611 2008-09-03 11:14 /etc/selinux/targeted/setrans.conf

2. semanage translation -a -T Secret s0:c2
/etc/init.d/functions: line 19: /sbin/consoletype: Permission denied
env: /etc/init.d/mcstrans: Permission denied

3. ls -l /etc/selinux/targeted/setrans.conf 
-rw------- 1 root root 611 2008-09-03 11:14 /etc/selinux/targeted/setrans.conf
  
Actual results:
Errors on the console; AVC denials; setrans.conf mode changed from 644 to 600.

Expected results:

No errors on the console; no AVC denials; setrans.conf mode stays as 644.

Comment 1 Murray McAllister 2008-09-03 02:46:43 UTC
"semanage translation -a -T Secret s0:c2" adds the translation despite the errors and denials.

Looks almost the same as bug #460970 but with less denials.

Comment 2 Murray McAllister 2008-09-03 02:47:37 UTC
Created attachment 315613 [details]
AVC denials

Comment 3 Daniel Walsh 2008-09-05 15:29:56 UTC
Fixed in selinux-policy-3.5.6-2.fc10.noarch


Note You need to log in before you can comment on or make changes to this bug.