Bug 5240 - services restarted by tlwebadm get wrong SELinux context
Summary: services restarted by tlwebadm get wrong SELinux context
Status: CLOSED FIXED
Alias: None
Product: ThinLinc
Classification: Unclassified
Component: Web Administration (show other bugs)
Version: trunk
Hardware: PC Unknown
: P2 Normal
Target Milestone: 4.3.0
Assignee: Pierre Ossman
URL:
Keywords: hean01_tester, prosaic
Depends on:
Blocks:
 
Reported: 2014-09-03 12:45 CEST by Pierre Ossman
Modified: 2014-10-06 16:25 CEST (History)
1 user (show)

See Also:
Acceptance Criteria:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Pierre Ossman cendio 2014-09-03 12:45:00 CEST 
Before:

> system_u:system_r:thinlinc_agent_t:s0 1486 ?   Ss     0:00 python-thinlinc /opt/thinlinc/sbin/vsmagent
> system_u:system_r:thinlinc_master_t:s0 1570 ?  Ss     0:00 python-thinlinc /opt/thinlinc/sbin/vsmserver

After:

> system_u:system_r:thinlinc_webadm_t:s0 1914 ?  Ss     0:00 python-thinlinc /opt/thinlinc/sbin/vsmserver
> system_u:system_r:thinlinc_webadm_t:s0 1971 ?  Ss     0:00 python-thinlinc /opt/thinlinc/sbin/vsmagent

As you can see, the services inherit tlwebadm's context. Not sure why as tlwebadm is unconfined.

This is a regression (of sorts) caused by commit r28234 in bug 4780.
Comment 1 Pierre Ossman cendio 2014-09-03 16:22:54 CEST 
Fixed in r29320.
Comment 2 Henrik Andersson cendio 2014-09-24 12:11:25 CEST 
Tested using build 4497 on RHEL7, works as expected.
Note You need to log in before you can comment on or make changes to this bug.