Hide Forgot
Description of problem: Version-Release number of selected component (if applicable): selinux-policy-targeted-3.7.19-145.el6.noarch selinux-policy-doc-3.7.19-145.el6.noarch selinux-policy-mls-3.7.19-145.el6.noarch selinux-policy-3.7.19-145.el6.noarch selinux-policy-minimum-3.7.19-145.el6.noarch opencryptoki-2.4-2.el6.x86_64 How reproducible: always Steps to Reproduce: # run_init service pkcsslotd status Authenticating root. Password: pkcsslotd is stopped # run_init service pkcsslotd start Authenticating root. Password: Starting pkcsslotd: [ OK ] # run_init service pkcsslotd status Authenticating root. Password: pkcsslotd (pid 12315) is running... # ps -efZ | grep pkcsslotd system_u:system_r:initrc_t:s0 root 12315 1 0 19:18 ? 00:00:00 /usr/sbin/pkcsslotd unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 root 12330 12100 0 19:19 pts/1 00:00:00 grep pkcsslotd # Actual results: * pkcsslotd runs as initrc_t Expected results: * pkcsslotd runs in its own SELinux domain
The daemon is not confined by SELinux. Please help SELinux folks to create a suitable policy module. You know that we should minimize the number of programs running as initrc_t, don't you?
This request was not resolved in time for the current release. Red Hat invites you to ask your support representative to propose this request, if still desired, for consideration in the next release of Red Hat Enterprise Linux.
This request was erroneously removed from consideration in Red Hat Enterprise Linux 6.4, which is currently under development. This request will be evaluated for inclusion in Red Hat Enterprise Linux 6.4.
This request was evaluated by Red Hat Product Management for inclusion in the current release of Red Hat Enterprise Linux. Because the affected component is not scheduled to be updated in the current release, Red Hat is unable to address this request at this time. Red Hat invites you to ask your support representative to propose this request, if appropriate, in the next release of Red Hat Enterprise Linux.
*** This bug has been marked as a duplicate of bug 855834 ***