Bug 631875
| Summary: | Release Notes: Tech Preview for SELinux + Monitoring in Sat 5.4 - same as 5.3 Release Notes - WAS: AVC denial when monitoring enabled, comm="gogo.pl" path="/usr/sbin/sendmail.sendmail" | ||
|---|---|---|---|
| Product: | Red Hat Satellite 5 | Reporter: | Petr Sklenar <psklenar> |
| Component: | Docs Release Notes | Assignee: | John Ha <jha> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | ecs-bugs |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 540 | CC: | adstrong, cperry, gkhachik, jhutar, jpazdziora |
| Target Milestone: | --- | Keywords: | Regression |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | Fixed in the 5.4.0 Release - GA'd 2010-10-27 | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2010-10-28 14:57:33 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 588923 | ||
| Bug Blocks: | 608749 | ||
The upstream (Spacewalk) bugzilla is bug 588923. Added to the latest Satellite 5.4 Release Notes draft: http://documentation-stage.bne.redhat.com/docs/en-US/Red_Hat_Network_Satellite/5.4/html-single/Release_Notes/index.html there are docs:
Chapter 2. Enhancements
The following are a list of improvements and enhancements made to RHN Satellite 5.4
*
Bug 631875 - SELinux modules that support Monitoring of RHN Satellite and RHN Proxy Server on Red Hat Enterprise Linux 5 are available. Note that because this feature is a Technology Preview, it may not be functionally complete and is currently not supported for production use.
--
1. it is included in link from Comment 4
2: https://<fqdn_of_satellite>/rhn/help/release-notes/satellite/en-US/index.jsp
Satellite-5.4.0-RHEL5-re20101001.1
--
verified
The 5.4.0 RHN Satellite and RHN Proxy release has occurred. This issue has been resolved with this release. RHEA-2010:0801 - RHN Satellite Server 5.4.0 Upgrade https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10332 RHEA-2010:0803 - RHN Tools enhancement update https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10333 RHEA-2010:0802 - RHN Proxy Server 5.4.0 bug fix update https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10334 RHEA-2010:0800 - RHN Satellite Server 5.4.0 https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10335 Docs are available: http://docs.redhat.com/docs/en-US/Red_Hat_Network_Satellite/index.html Regards, Clifford |
Description of problem: satellite is full of avc denials when I enabled monitoring Version-Release number of selected component (if applicable): Satellite-5.4.0-RHEL5-re20100903.1 How reproducible: always Steps to Reproduce: 1. enable monitoring in webUI 2. restart satellite Actual results: 1. type=AVC msg=audit(1285150069.273:975): avc: denied { getattr } for pid=23725 comm="gogo.pl" path="/usr/sbin/sendmail.sendmail" dev=dm-0 ino=15679768 scontext=root:system_r:spacewalk_monitoring_t:s0 tcontext=system_u:object_r:sendmail_exec_t:s0 tclass=file 2. type=AVC msg=audit(1285149928.071:848): avc: denied { getattr } for pid=20863 comm="kernel.pl" path="/usr/sbin/sendmail.sendmail" dev=dm-0 ino=15679768 scontext=root:system_r:spacewalk_monitoring_t:s0 tcontext=system_u:object_r:sendmail_exec_t:s0 tclass=file Expected results: NO avc denial Additional info: