Description of problem: After reboot, /var/lock/mailman gets created with the wrong labels. This breaks all administrative functionality in mailman. restorecon gives: [root@terminus mailman]# restorecon -v -R . restorecon reset /run/lock/mailman context system_u:object_r:var_run_t:s0->system_u:object_r:mailman_lock_t:s0 restorecon reset /run/lock/mailman/master-qrunner.terminus.zytor.com.2223 context system_u:object_r:mailman_var_run_t:s0-> Version-Release number of selected component (if applicable): selinux-policy-targeted-3.10.0-169.fc17.noarch mailman-2.1.14-13.fc17.x86_64 How reproducible: Happens after every reboot, since /var/lock is part of /run Steps to Reproduce: 1. Reboot system 2. Check labels on /var/lock/mailman 3. Actual results: Expected results: Additional info:
Actually complete paste: [root@terminus mailman]# restorecon -v -R . restorecon reset /run/lock/mailman context system_u:object_r:var_run_t:s0->system_u:object_r:mailman_lock_t:s0 restorecon reset /run/lock/mailman/master-qrunner.terminus.zytor.com.2223 context system_u:object_r:mailman_var_run_t:s0->system_u:object_r:mailman_lock_t:s0
bc0348c466a92d42aa72658f3ea93013aaa43201 fixes this in git.
I'm little bit confused now. Daniel, in which git repository the fix is?
git://git.fedorahosted.org/selinux-policy.git back ported to F18.
We need this on F17 too...
Back ported. commit bf2f597e0b69189de0ba3ac0af05d79ad29305d7 Author: Miroslav Grepl <mgrepl> Date: Fri Jun 14 07:44:46 2013 +0200 Fix labeling of mailman
Is there a koji build for this for F17 by any chance?
selinux-policy-3.11.1-98.fc18 has been submitted as an update for Fedora 18. https://admin.fedoraproject.org/updates/selinux-policy-3.11.1-98.fc18
Package selinux-policy-3.11.1-98.fc18: * should fix your issue, * was pushed to the Fedora 18 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.11.1-98.fc18' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2013-11859/selinux-policy-3.11.1-98.fc18 then log in and leave karma (feedback).
To repeat: Is there a build for this for F17 by any chance? (Before 17 disappears?)
Yes, I am working on the latest F17 fixes and the fix for this bug is coming with these fixes.
selinux-policy-3.11.1-98.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report.