Bug 965619 - Categories translation issues on RHEL5
Summary: Categories translation issues on RHEL5
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: policycoreutils
Version: 5.9
Hardware: All
OS: Linux
unspecified
medium
Target Milestone: rc
: ---
Assignee: Daniel Walsh
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-05-21 12:18 UTC by Michal Trunecka
Modified: 2014-09-30 23:34 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-05-21 16:37:09 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Michal Trunecka 2013-05-21 12:18:20 UTC
Description of problem:
In default settings in setrans.conf is   "s0="  and therefore shouldn't be translated/displayed.

But chcat listing of users shows s0, even that other levels/categories are translated correctly:

# chcat -L -l user17003
user17003: s0
# chcat -l -- +Marketing user17003
user17003: Marketing



If I add "s0=SystemLow" into setrans, the listing of s0 cat by chcat works fine:
#chcat -L -l user17003
user17003: SystemLow

But other translation don't work as expected (with definition s0:c0=Marketing):

# chcat -l -- +Marketing user17003
# chcat -L -l user8977
user8977: SystemLow:Marketing

Expected (as it works in RHEL6,7 this way):

# chcat -L -l user8977
user8977: Marketing

And then also adding new category to file or user failes:

# chcat -l -- +Finance user8977
libsepol.mls_from_string: invalid MLS context s0-s0:c0,Finance
libsepol.mls_from_string: could not construct mls context structure
libsemanage.validate_handler: seuser mapping [user8977 -> (user_u, s0-s0:c0,Finance)] is invalid
libsemanage.dbase_llist_iterate: could not iterate over records
/usr/sbin/semanage: Could not modify login mapping for user8977

.. or ..

# chcat -- +Marketing
chcon: failed to change context of /tmp/file.TKrX1585 to root:object_r:tmp_t:s0:Marketing: Invalid argument




Version-Release number of selected component (if applicable):
policycoreutils-1.33.12-14.8.el5_9
mcstrans-0.2.11-3.el5

Comment 1 Daniel Walsh 2013-05-21 16:01:16 UTC
Please run these checks on RHEL6, we are not likely to fix them in RHEL5.

Comment 2 RHEL Program Management 2013-05-21 16:37:09 UTC
Development Management has reviewed and declined this request.
You may appeal this decision by reopening this request.


Note You need to log in before you can comment on or make changes to this bug.