Bug 791294 - SELinux prevents clustered qpidd (qpidd_t) from name_connect (tcp_socket, amqp_port_t)
Summary: SELinux prevents clustered qpidd (qpidd_t) from name_connect (tcp_socket, amq...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: selinux-policy
Version: 6.2
Hardware: All
OS: Linux
urgent
urgent
Target Milestone: rc
: 6.2
Assignee: Miroslav Grepl
QA Contact: Frantisek Reznicek
URL:
Whiteboard:
Depends On: 786467
Blocks: 796331
TreeView+ depends on / blocked
 
Reported: 2012-02-16 16:38 UTC by Frantisek Reznicek
Modified: 2015-11-16 01:14 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
An incorrect SELinux policy prevented the qpidd service from connecting to the AMQP (Advanced Message Queuing Protocol) port when the qpidd daemon was configured with Corosync clustering. These selinux-policy packages contain updated SELinux rules, which allow the qpidd service to be started correctly.
Clone Of: 786467
Environment:
Last Closed: 2012-06-20 12:31:30 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2012:0780 0 normal SHIPPED_LIVE selinux-policy bug fix and enhancement update 2012-06-19 20:34:59 UTC

Comment 1 Frantisek Reznicek 2012-02-16 16:41:03 UTC 
Proposing bug for 6.2.Z stream as the same AVC was detected on 6.2 running qpidd in cluster.
Comment 7 Miroslav Svoboda 2012-03-02 14:22:36 UTC 
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
An incorrect SELinux policy prevented the qpidd service from connecting to the AMQP (Advanced Message Queuing Protocol) port when the qpidd daemon was configured with Corosync clustering. These selinux-policy packages contain updated SELinux rules, which allow the qpidd service to be started correctly.
Comment 8 Frantisek Reznicek 2012-03-07 13:03:39 UTC 
Issue has been reliably fixed on both
- RHEL 6.3.0 (selinux-policy-3.7.19-138.el6) i686 / x86_64 / s390x / ppc64
- RHEL 6.2.z (selinux-policy-3.7.19-126.el6_2.10) i686 / x86_64

for both brokers (qpidd, matahari-broker)

-> VERIFIED
Comment 9 errata-xmlrpc 2012-06-20 12:31:30 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0780.html
Note You need to log in before you can comment on or make changes to this bug.