Bug 723977 - cimserver runs as initrc_t
Summary: cimserver runs as initrc_t
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: selinux-policy
Version: 6.1
Hardware: All
OS: Linux
medium
medium
Target Milestone: rc
: ---
Assignee: Miroslav Grepl
QA Contact: Milos Malik
URL:
Whiteboard:
: 735014 735029 (view as bug list)
Depends On:
Blocks: 832330
TreeView+ depends on / blocked
 
Reported: 2011-07-21 16:36 UTC by Steve Grubb
Modified: 2014-06-17 14:07 UTC (History)
3 users (show)

Fixed In Version: selinux-policy-3.7.19-109.el6
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-12-06 10:09:46 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2011:1511 0 normal SHIPPED_LIVE selinux-policy bug fix and enhancement update 2011-12-06 00:39:17 UTC

Description Steve Grubb 2011-07-21 16:36:29 UTC 
Description of problem:
ps -eZ shows cimserver as running under initrc_t. It comes from the top-pegasus
package.
Comment 1 Miroslav Grepl 2011-07-21 19:27:45 UTC 
I see in Fedora

# matchpathcon /usr/sbin/cimserver 
/usr/sbin/cimserver	system_u:object_r:pegasus_exec_t:s0
Comment 2 Miroslav Grepl 2011-07-21 19:28:41 UTC 
Actually, did you test it on MLS or targeted policy?
Comment 3 Steve Grubb 2011-07-22 12:14:00 UTC 
This was on targeted policy.
Comment 4 Miroslav Grepl 2011-07-26 13:35:25 UTC 
Hmm, strange. It looks like "/usr/sbin/cimserver" is mislabeled.


# matchpathcon /usr/sbin/cimserver
/usr/sbin/cimserver system_u:object_r:pegasus_exec_t:s0

on RHEL6 also.
Comment 9 Miroslav Grepl 2011-08-03 12:52:52 UTC 
I added fixes to rawhide. Will backport.
Comment 10 Miroslav Grepl 2011-08-10 15:02:43 UTC 
Fixed in selinux-policy-3.7.19-107.el6
Comment 14 Miroslav Grepl 2011-08-29 07:58:07 UTC 
I am fixing it.
Comment 15 Miroslav Grepl 2011-08-31 20:08:44 UTC 
Fixed in selinux-policy-3.7.19-109.el6
Comment 16 Miroslav Grepl 2011-09-05 06:34:38 UTC 
*** Bug 735029 has been marked as a duplicate of this bug. ***
Comment 19 Petr Sklenar 2011-09-21 12:38:46 UTC 
*** Bug 735014 has been marked as a duplicate of this bug. ***
Comment 20 errata-xmlrpc 2011-12-06 10:09:46 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2011-1511.html
Note You need to log in before you can comment on or make changes to this bug.