Hide Forgot
+++ This bug was initially created as a clone of Bug #784121 +++ Description of problem: Semanage is sending the wrong kind of audit events. When a user is assigned a new role, an AUDIT_ROLE_ASSIGN event should be sent. When a user has a role removed, an AUDIT_ROLE_REMOVE event should be sent. When a user's process changes roles, like during login, its supposed to issue an AUDIT_USER_ROLE_CHANGE event. Semanage is only sending AUDIT_USER_ROLE_CHANGE - which is the wrong kind of event. # rpm -qa policycoreutils\* policycoreutils-newrole-1.33.12-14.8.el5 policycoreutils-gui-1.33.12-14.8.el5 policycoreutils-1.33.12-14.8.el5 How reproducible: Always Steps to Reproduce: 1. semanage user --add -R staff_r test 2. ausearch -m ROLE_ASSIGN --start recent
This request was evaluated by Red Hat Product Management for inclusion in the current release of Red Hat Enterprise Linux. Because the affected component is not scheduled to be updated in the current release, Red Hat is unfortunately unable to address this request at this time. Red Hat invites you to ask your support representative to propose this request, if appropriate and relevant, in the next release of Red Hat Enterprise Linux.
Milos, I would move it on RHEL6 until we get Fedora fix.
No problem.