Created attachment 351272 [details] audit.log Description of problem: While running autotest on a RHEL5.3, the server is unable to copy test log files from client systems using rsync over ssh. Version-Release number of selected component (if applicable): * libselinux-1.33.4-5.1.el5 * selinux-policy-targeted-2.4.6-203.el5 * selinux-policy-2.4.6-203.el5 * autotest-0.10.0-4.ep5.el5 How reproducible: * 100% Steps to Reproduce: 1. Install setup and configure autotest for el5 2. Start the server scheduler daemon # /etc/init.d/autotest start 3. Queue a job # atest job create "rawhide-repoclosure" -B never -a never -f /usr/share/autotest/client/tests/repoclosure/control -m some-client.example.com 4. Wait for job to complete ... Actual results: * When job completes, notice that the job test results have not been copied back to server. See the missing "repoclosure-*" directories below: # ls /usr/share/autotest/results/50-autotest/some-client.example.com control control.srv debug/ host_keyvals/ keyval status.log sysinfo/ Expected results: Test logs should have been copied back to the server (see "repoclosure*" directories below): # ls /usr/share/autotest/results/52-autotest/some-client.example.com analysis/ debug/ repoclosure.rawhide-i386/ status control host_keyvals/ repoclosure.rawhide-ppc/ status.log control.srv keyval repoclosure.rawhide-x86_64/ sysinfo/ Additional info: * According to dwalsh, there is a boolean called rsync_client in latest policy but it does not support ssh.
Clearing flags for now ... if this is desired in RHEL5.4, the exception? must be set.
Fixed in selinux-policy-2.4.6-256.el5
I've updated to selinux-policy-2.4.6-274.el5 and I'm no longer seeing the reported issue. Thanks!
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2010-0182.html