#220: Check domains of running services after installation
---------------------+------------------------------------------------------
Reporter: adelton | Owner:
Type: task | Status: new
Priority: minor | Milestone:
Component: tests | Version: 1.0
Keywords: |
---------------------+------------------------------------------------------
Recently I've came across issue
https://bugzilla.redhat.com/show_bug.cgi?id=628495
when daemons run as initrc_t.
In this case it was in spite of the fact that there was a SELinux policy
module loaded, simply because the file context was pointing to a file that
no longer existed in that rpm and which was no longer run during service
startup.
I believe that with older Fedoras and with older versions of that package,
the file context was actually correct and the daemons run confined.
So avoid any such regressions, it would be nice when doing some post-
installation tests and starting services to also check the SELinux domain
of the processes that are started by those services (ps Z).
Thanks, Jan
--
Ticket URL: <https://fedorahosted.org/autoqa/ticket/220>
AutoQA <http://autoqa.fedorahosted.org>
Automated QA project
_______________________________________________
autoqa-devel mailing list
[email protected]
https://fedorahosted.org/mailman/listinfo/autoqa-devel
