Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 120854
| Summary: | cannot run up2date as sysadm_r user (can as root) | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Gene Czarcinski <gczarcinski> |
| Component: | policy | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED NEXTRELEASE | QA Contact: | Ben Levenson <benl> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | rawhide | CC: | pgraner |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2004-04-21 21:13:45 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 114961 | ||
Fixed in rawhide policy-1.11.2-6 Nope, still not working (with policy-1.11.2-6 applied):
Apr 15 13:19:02 chaos kernel: audit(1082049542.764:0): avc: denied {
transition } for pid=3298 exe=/usr/sbin/userhelper
path=/usr/sbin/up2date dev=hda7 ino=776821
scontext=czarcing:sysadm_r:userhelper_t
tcontext=czarcing:sysadm_r:rpm_t tclass=process
reverified still a problem with policy=1.11.2-9
Apr 17 16:53:09 chaos kernel: audit(1082235189.335:0): avc: denied {
transition } for pid=23150 exe=/usr/sbin/userhelper
path=/usr/sbin/up2date dev=hda7 ino=776821
scontext=czarcing:sysadm_r:userhelper_t
tcontext=czarcing:sysadm_r:rpm_t tclass=process
Ok, should be fixed in the next policy upload (1.11.2-15). Verified fixed in FC2-T3 plus policy=1.11.2-18 and up2date=4.3.17 |
Description of problem: I cannot run up2date from a sysadm_r user login. I get the prompt for the password but then it just quits. policy = 1.11.2-1 up2date = 4.3.16-1 from /var/log/messages: Apr 14 11:37:23 chaos kernel: audit(1081957043.719:0): avc: denied { transition } for pid=3104 exe=/usr/sbin/userhelper path=/usr/sbin/up2date dev=hda7 ino=776821 scontext=czarcing:staff_r:userhelper_t tcontext=czarcing:sysadm_r:rpm_t tclass=process