Bug 813959 - Confusion between httpd_sys_rw_content_t and httpd_sys_script_rw_t
Summary: Confusion between httpd_sys_rw_content_t and httpd_sys_script_rw_t
Keywords:
Status: CLOSED CANTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted
Version: 16
Hardware: Unspecified
OS: Unspecified
unspecified
low
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Ben Levenson
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-04-18 20:53 UTC by Tim Landscheidt
Modified: 2012-04-20 12:20 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of: 812631
: 814708 (view as bug list)
Environment:
Last Closed: 2012-04-20 12:20:34 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Tim Landscheidt 2012-04-18 20:53:24 UTC
Description of problem:

Files in /etc/BackupPC have context httpd_sys_rw_content_t which restorecon wants to set to httpd_sys_script_rw_t but doesn't succeed.


Version-Release number of selected component (if applicable):

selinux-policy-3.10.0-80.fc16.noarch
selinux-policy-targeted-3.10.0-80.fc16.noarch


How reproducible:

Always.


Actual results:

| [root@passepartout ~]# restorecon -Rv /etc/BackupPC
| restorecon reset /etc/BackupPC context system_u:object_r:httpd_sys_rw_content_t:s0->system_u:object_r:httpd_sys_script_rw_t:s0
| restorecon reset /etc/BackupPC/config.pl context system_u:object_r:httpd_sys_rw_content_t:s0->system_u:object_r:httpd_sys_script_rw_t:s0
| restorecon reset /etc/BackupPC/hosts context system_u:object_r:httpd_sys_rw_content_t:s0->system_u:object_r:httpd_sys_script_rw_t:s0
| [root@passepartout ~]# restorecon -Rv /etc/BackupPC
| restorecon reset /etc/BackupPC context system_u:object_r:httpd_sys_rw_content_t:s0->system_u:object_r:httpd_sys_script_rw_t:s0
| restorecon reset /etc/BackupPC/config.pl context system_u:object_r:httpd_sys_rw_content_t:s0->system_u:object_r:httpd_sys_script_rw_t:s0
| restorecon reset /etc/BackupPC/hosts context system_u:object_r:httpd_sys_rw_content_t:s0->system_u:object_r:httpd_sys_script_rw_t:s0
| [root@passepartout ~]#


Expected results:

restorecon should succeed.


Additional info:

| [root@passepartout ~]# semanage -o -
| boolean -D
| boolean -1 fcron_crond
| boolean -1 httpd_enable_homedirs
| login -D
| login -a -s unconfined_u -r 's0-s0:c0.c1023' __default__
| login -a -s unconfined_u -r 's0-s0:c0.c1023' root
| login -a -s system_u -r 's0-s0:c0.c1023' system_u
| user -D
| port -D
| interface -D
| node -D
| fcontext -D
| [root@passepartout ~]#

Comment 1 Miroslav Grepl 2012-04-20 12:20:34 UTC
It needs to be fixed in the BackupPC policy.


Note You need to log in before you can comment on or make changes to this bug.