Bug 591561 - AVC denials appeared during service vhostmd start/stop
Summary: AVC denials appeared during service vhostmd start/stop
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: selinux-policy
Version: 6.0
Hardware: All
OS: Linux
low
medium
Target Milestone: rc
: ---
Assignee: Daniel Walsh
QA Contact: Milos Malik
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-05-12 14:50 UTC by Milos Malik
Modified: 2012-10-15 14:36 UTC (History)
1 user (show)

Fixed In Version: selinux-policy-3.7.19-18.el6.noarch
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-11-11 14:57:34 UTC
Target Upstream Version:


Attachments (Terms of Use)
AVC denials (15.98 KB, text/plain)
2010-05-12 14:51 UTC, Milos Malik
no flags Details

Description Milos Malik 2010-05-12 14:50:14 UTC
Description of problem:


Version-Release number of selected component (if applicable):
selinux-policy-3.7.19-15.el6.noarch
selinux-policy-doc-3.7.19-15.el6.noarch
selinux-policy-minimum-3.7.19-15.el6.noarch
selinux-policy-mls-3.7.19-15.el6.noarch
selinux-policy-targeted-3.7.19-15.el6.noarch
vhostmd-0.4-2.2.el6.i686
vhostmd-debuginfo-0.4-2.2.el6.i686

How reproducible:
always

Steps to Reproduce:
# service vhostmd start
Starting vhostmd: [  OK  ]
# service vhostmd status
vhostmd (pid  30616) is running...
# service vhostmd stop
Stopping vhostmd: [  OK  ]
# ausearch -m avc -ts recent | audit2allow


#============= policykit_t ==============
allow policykit_t vhostmd_t:dir getattr;
allow policykit_t xm_t:dir getattr;

#============= xm_t ==============
allow xm_t proc_net_t:file read;
allow xm_t self:process { getcap setcap };


Actual results:
few AVC denials

Expected results:
no AVC denials

Comment 1 Milos Malik 2010-05-12 14:51:17 UTC
Created attachment 413450 [details]
AVC denials

Comment 2 Daniel Walsh 2010-05-12 15:12:39 UTC
Fixed in selinux-policy-3.7.19-16.fc13.noarch

Comment 5 Daniel Walsh 2010-05-18 19:35:59 UTC
Fixed in selinux-policy-3.7.19-18.el6.noarch

Comment 7 releng-rhel@redhat.com 2010-11-11 14:57:34 UTC
Red Hat Enterprise Linux 6.0 is now available and should resolve
the problem described in this bug report. This report is therefore being closed
with a resolution of CURRENTRELEASE. You may reopen this bug report if the
solution does not work for you.


Note You need to log in before you can comment on or make changes to this bug.