Description of problem: satellite is full of avc denials when I enabled monitoring Version-Release number of selected component (if applicable): Satellite-5.4.0-RHEL5-re20100903.1 How reproducible: always Steps to Reproduce: 1. enable monitoring in webUI 2. restart satellite Actual results: 1. type=AVC msg=audit(1285150069.273:975): avc: denied { getattr } for pid=23725 comm="gogo.pl" path="/usr/sbin/sendmail.sendmail" dev=dm-0 ino=15679768 scontext=root:system_r:spacewalk_monitoring_t:s0 tcontext=system_u:object_r:sendmail_exec_t:s0 tclass=file 2. type=AVC msg=audit(1285149928.071:848): avc: denied { getattr } for pid=20863 comm="kernel.pl" path="/usr/sbin/sendmail.sendmail" dev=dm-0 ino=15679768 scontext=root:system_r:spacewalk_monitoring_t:s0 tcontext=system_u:object_r:sendmail_exec_t:s0 tclass=file Expected results: NO avc denial Additional info:
The upstream (Spacewalk) bugzilla is bug 588923.
Added to the latest Satellite 5.4 Release Notes draft: http://documentation-stage.bne.redhat.com/docs/en-US/Red_Hat_Network_Satellite/5.4/html-single/Release_Notes/index.html
there are docs: Chapter 2. Enhancements The following are a list of improvements and enhancements made to RHN Satellite 5.4 * Bug 631875 - SELinux modules that support Monitoring of RHN Satellite and RHN Proxy Server on Red Hat Enterprise Linux 5 are available. Note that because this feature is a Technology Preview, it may not be functionally complete and is currently not supported for production use. -- 1. it is included in link from Comment 4 2: https://<fqdn_of_satellite>/rhn/help/release-notes/satellite/en-US/index.jsp Satellite-5.4.0-RHEL5-re20101001.1 -- verified
The 5.4.0 RHN Satellite and RHN Proxy release has occurred. This issue has been resolved with this release. RHEA-2010:0801 - RHN Satellite Server 5.4.0 Upgrade https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10332 RHEA-2010:0803 - RHN Tools enhancement update https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10333 RHEA-2010:0802 - RHN Proxy Server 5.4.0 bug fix update https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10334 RHEA-2010:0800 - RHN Satellite Server 5.4.0 https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10335 Docs are available: http://docs.redhat.com/docs/en-US/Red_Hat_Network_Satellite/index.html Regards, Clifford