First Last Prev Next    No search results available      Search page      Enter new bug
Bug#: 45917
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Chris PeBenito <pebenito@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: petre rodan (RETIRED) <kaiowas@gentoo.org>
Add CC:
CC:
URL:
Summary:
Status Whiteboard:
Keywords:

Filename Description Type Creator Created Size Actions
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 45917 depends on: Show dependency tree
Bug 45917 blocks:
Votes: 0    Show votes for this bug    Vote for this bug

Additional Comments: (this is where you put emerge --info)


Not eligible to see or edit group visibility for this bug.






View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2004-03-27 12:11 0000 
in 3.0.2 the courierlogger binary was moved in /usr/sbin and a symlink was
provided for compatibility. 

the policy should be changed like this:

in courier-imap.te
+allow courier_tcpd_t courier_exec_t:lnk_file { read };

in courier-imap.fc
-/usr/lib/courier-imap/courierlogger --  system_u:object_r:courier_exec_t
+/usr/lib/courier-imap/courierlogger     system_u:object_r:courier_exec_t
+/usr/sbin/courierlogger             --  system_u:object_r:courier_exec_t

I will check monday if more rules must be changed on a more used server. 
on my home server I haven't found any additional inconsistences.

------- Comment #1 From petre rodan (RETIRED) 2004-03-29 22:55:57 0000 ------- 
no additional policy changes were needed.
please update the policy files.

bye,
peter

------- Comment #2 From Chris PeBenito 2004-03-30 14:25:38 0000 ------- 
Generally we try not to give symlinks special labels.  It seems like there only
needs to be these additions, since it looks like the symlink would be bin_t
with the current file contexts:

allow courier_tcpd_t bin_t:lnk_file read;

fc:
/usr/sbin/courierlogger -- system_u:object_r:courier_exec_t

------- Comment #3 From petre rodan (RETIRED) 2004-03-30 23:15:12 0000 ------- 
ok, it also works using your version.

------- Comment #4 From Chris PeBenito 2004-04-06 13:14:45 0000 ------- 
selinux-courier-imap-20040406 committed to portage
First Last Prev Next    No search results available      Search page      Enter new bug