Bug 592947 - service xendomains status - fails due to selinux, can't read xen config file
Summary: service xendomains status - fails due to selinux, can't read xen config file
Keywords:
Status: CLOSED DUPLICATE of bug 579497
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: selinux-policy
Version: 5.5
Hardware: All
OS: Linux
medium
medium
Target Milestone: rc
: ---
Assignee: Miroslav Grepl
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-05-17 12:57 UTC by David Kovalsky
Modified: 2014-03-31 23:45 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-05-17 16:40:10 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description David Kovalsky 2010-05-17 12:57:26 UTC 
I've noticed that in 5.5 `service xendomains status' doesn't work. Returns 1.

# service xendomains status
Checking for xendomains:Error: Unable to open config file: /etc/xen/auto/private.xen
....
 MISS AUTO:       [dead]                                   [FAILED]


# echo $?
1

/var/log/audit/audit.log contains these entries.

14508 type=AVC msg=audit(1274100371.856:18735): avc:  denied  { read } for  pid=10953 comm="xm" name="private.xen" dev=md3 ino=246341 scontext=root:system_r:xm_t:s0 tcontext=system_u:object_r:virt_etc_rw_t:s0 tclass=lnk_file
Comment 1 Daniel Walsh 2010-05-17 13:05:35 UTC 
Miroslav add
	manage_lnk_files_pattern($1, virt_etc_rw_t, virt_etc_rw_t)

To virt_manage_config
Comment 2 Miroslav Grepl 2010-05-17 16:40:10 UTC 

*** This bug has been marked as a duplicate of bug 579497 ***
Note You need to log in before you can comment on or make changes to this bug.