77739 – dispatch-conf under SELinux has no access to CONFIG_PROTECTed directories under /usr/lib

Bug 77739 - dispatch-conf under SELinux has no access to CONFIG_PROTECTed directories under /usr/lib

Summary: dispatch-conf under SELinux has no access to CONFIG_PROTECTed directories und...

Status:	RESOLVED LATER

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Hardened (show other bugs)
Hardware:	All All

Importance:	High normal (vote)
Assignee:	Chris PeBenito (RETIRED)

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2005-01-12 14:12 UTC by Stephen Bennett (RETIRED)
Modified:	2009-12-16 14:28 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Stephen Bennett (RETIRED) gentoo-dev

2005-01-12 14:12:50 UTC

dispatch-conf with the current policy (selinux-base-policy-20041123) fails if there are any file updates in (for example) /usr/lib, where sysadm_t has no write permissions. Simple fix is to label dispatch-conf (and probably etc-update too) as portage_exec_t, though it's possible that that gives more permission that is desirable...