Description of problem: Starting with version 1.8, when the krb5-appl package was split off from krb5 proper, we stopped needing to build krb5 with a prefix of /usr/kerberos instead of the default of /usr in order to avoid file conflicts with the non-Kerberos-aware versions of telnet, ftp, rsh, rlogin, and friends. Looking at bug #858872 is making me wonder if we missed some policy updates. Version-Release number of selected component (if applicable): selinux-policy-3.11.1-21.fc18.noarch How reproducible: Always Steps to Reproduce: 1. matchpathcon /usr/kerberos/sbin/kpropd 2. matchpathcon /usr/sbin/kpropd Actual results: /usr/kerberos/sbin/kpropd system_u:object_r:kpropd_exec_t:s0 /usr/sbin/kpropd system_u:object_r:bin_t:s0 Expected results: Should they produce the same result?
Fixed in selinux-policy-3.11.1-26.fc18.noarch
selinux-policy-3.11.1-36.fc18 has been submitted as an update for Fedora 18. https://admin.fedoraproject.org/updates/selinux-policy-3.11.1-36.fc18
Package selinux-policy-3.11.1-36.fc18: * should fix your issue, * was pushed to the Fedora 18 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.11.1-36.fc18' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-15934/selinux-policy-3.11.1-36.fc18 then log in and leave karma (feedback).
selinux-policy-3.11.1-36.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report.