Bug #23700
closedTemplates plugin disallowed to create symlinks
Description
When I run the command to import my templates from git I get an SELinux denial:
type=PROCTITLE msg=audit(1526982093.115:5964): proctitle=67697400636C6F6E65002D2D007373683A2F2F676974406769746875622E636F6D2F67676174776172642F47475F4B69636B73746172742E676974002F746D702F6432303138303532322D33313436362D337375657972
type=SYSCALL msg=audit(1526982093.115:5964): arch=c000003e syscall=88 success=no exit=-13 a0=518ccd a1=7817e0 a2=180 a3=7fff05e22ea0 items=0 ppid=15768 pid=15769 auid=4294967295 uid=991 gid=989 euid=991 suid=991 fsuid=991 egid=989 sgid=989 fsgid=989 tty=(none) ses=4294967295 comm="git" exe="/usr/bin/git" subj=system_u:system_r:passenger_t:s0 key=(null)
type=AVC msg=audit(1526982093.115:5964): avc: denied { create } for pid=15769 comm="git" name="tCZtgIQ" scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:passenger_tmp_t:s0 tclass=lnk_file
When running with audit2allow the following policy te is created:
module my-git 1.0;
require {
type passenger_tmp_t;
type passenger_t;
class lnk_file { create getattr unlink };
}
#============= passenger_t ==============
allow passenger_t passenger_tmp_t:lnk_file { create getattr unlink };
Updated by The Foreman Bot over 6 years ago
- Status changed from New to Ready For Testing
- Pull request https://github.com/theforeman/foreman-selinux/pull/81 added
Updated by Lukas Zapletal over 6 years ago
- Translation missing: en.field_release set to 330
Updated by Anonymous over 6 years ago
- Status changed from Ready For Testing to Closed
- % Done changed from 0 to 100
Applied in changeset eff5e6b47277ddaa8c052615f643e37c19ec57d3.