Bug 791237 - service pulp-server init triggers avc denials
Summary: service pulp-server init triggers avc denials
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Pulp
Classification: Retired
Component: rel-eng
Version: unspecified
Hardware: x86_64
OS: Linux
unspecified
unspecified
Target Milestone: ---
: ---
Assignee: John Matthews
QA Contact: Preethi Thomas
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-02-16 15:13 UTC by Jim Perrin
Modified: 2013-09-27 14:33 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-09-27 14:33:05 UTC

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Jim Perrin 2012-02-16 15:13:56 UTC 
Description of problem:

the initial init triggers an selinux denial for ldconfig

Version-Release number of selected component (if applicable):

pulp-0.0.254-8.fc16.noarch

How reproducible:

Always

Steps to Reproduce:
1.yum install pulp
2. service pulp-server init
3.view logs.
  
Actual results:
type=AVC msg=audit(1329404037.587:503): avc:  denied  { write } for  pid=32209 comm="ldconfig" path=2F746D702F6666693334354C506F202864656C6574656429 dev=dm-1 ino=2639866 scontext=unconfined_u:system_r:ldconfig_t:s0 tcontext=unconfined_u:object_r:initrc_tmp_t:s0 tclass=file


Expected results:
clean logs

Additional info:

This occurs every time the init activity is run
Comment 1 John Matthews 2012-02-16 15:25:07 UTC 
I confirmed I can replicate this on F16.

There is a work around of not using "service pulp-server init"
If I run in the below order pulp works:
1) systemctl mongod.service start
2) /etc/init.d/pulp-server init
Comment 2 Michael Hrivnak 2013-09-27 14:33:05 UTC 
We no longer have an init script, because pulp is not a free-standing service. It's just a web app running in apache. Closing this as no-longer relevant.
Note You need to log in before you can comment on or make changes to this bug.