Bug 825154 - /usr/bin/rhts-backup and /usr/bin/rhts-restore doesn't preserve selinux context
Summary: /usr/bin/rhts-backup and /usr/bin/rhts-restore doesn't preserve selinux context
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Beaker
Classification: Retired
Component: beah
Version: 0.5
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: ---
Assignee: Bill Peck
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 593663
TreeView+ depends on / blocked
 
Reported: 2012-05-25 09:04 UTC by Karel Srot
Modified: 2019-05-22 13:42 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-06-26 06:40:08 UTC
Embargoed:


Attachments (Terms of Use)

Description Karel Srot 2012-05-25 09:04:13 UTC
I am sorry if this bug is assigned to a wrong component. 


Description of problem:

/usr/bin/rhts-backup and /usr/bin/rhts-restore detects selinux by presence of /selinux directory. This is not true on RHEL7 and therefore these functions doesn't backup the context. As the result, restored directories/files gets wrong context.

This has been already fixed in beakerlib (bug 800906) using 
selinuxenabled && SELINUX=true || SELINUX=false
but we have several old tests that are still using these functions and it is hard to fix them all.

please fix ASAP, RHEL7 tier tests are failing on AVC denials and it is hard to review so many failing tests.

Version-Release number of selected component (if applicable):
rhts-test-env-4.48-1.el7.noarch

Comment 1 Zbysek MRAZ 2012-06-05 06:50:40 UTC
Any progress on this?

Comment 2 Karel Srot 2012-06-18 05:42:52 UTC
Seems that there is no will to fix this simple but annoying bug.

Comment 3 Ondrej Hudlicky 2012-06-19 19:47:36 UTC
Karel - target release for this fix is too far away, lets try to workaround using funny test as first task and force rewrite the backup/restore files. 
/CoreOS/examples/rhts_tutorial/psklenar/funny-test

Comment 4 Bill Peck 2012-06-19 19:57:47 UTC
Will try and pull this into 0.9.0 but need to verify this against all releases.

Comment 5 Ondrej Hudlicky 2012-06-19 20:22:31 UTC
thanks! we are ready to help with testing; using "selinuxenabled" is low risk as it is used by beakerlib and TPS as standard way to detect SELinux state, also on older RHEL releases.

Comment 6 Bill Peck 2012-06-19 21:16:52 UTC
http://gerrit.beaker-project.org/#/c/1148/

Comment 7 Dan Callaghan 2012-06-21 22:43:01 UTC
This is fixed in rhts-test-env-4.49-1 which is currently deployed on stage:

https://beaker-stage.engineering.redhat.com/

Comment 8 Dan Callaghan 2012-06-26 06:40:08 UTC
Beaker 0.9.0 has been released.


Note You need to log in before you can comment on or make changes to this bug.