[Bug 1424823] New: ejabberd won't start with SELinux enforcing on Rawhide

https://bugzilla.redhat.com/show_bug.cgi?id=1424823

            Bug ID: 1424823
           Summary: ejabberd won't start with SELinux enforcing on Rawhide
           Product: Fedora
           Version: rawhide
         Component: ejabberd
          Severity: high
          Assignee: lemenkov(a)gmail.com
          Reporter: randy(a)electronsweatshop.com
        QA Contact: extras-qa(a)fedoraproject.org
                CC: erlang(a)lists.fedoraproject.org, jeremy(a)jcline.org,
                    lemenkov(a)gmail.com, martin(a)laptop.org,
                    randy(a)electronsweatshop.com



Description of problem:
ejabberd won't start with SELinux enforcing on Rawhide.


Version-Release number of selected component (if applicable):
ejabberd-17.01-1.fc26.x86_64


How reproducible:
Every time.


Steps to Reproduce:
1. sudo systemctl start ejabberd
2. ps aux | grep ejabberd


Actual results:
$ ps aux | grep ejab
ejabberd 10600  0.0  0.0  37184   260 ?        S    11:52   0:00
/usr/lib64/erlang/erts-8.2.2/bin/epmd -daemon
rbarlow  10790  0.0  0.0 119424   968 pts/3    S+   11:52   0:00 grep
--color=auto ejab


Expected results:
$ ps aux | grep ejab
ejabberd 11110  0.0  0.0  37184   264 ?        S    11:53   0:00
/usr/lib64/erlang/erts-8.2.2/bin/epmd -daemon
ejabberd 11112  156  1.1 3189700 56260 ?       Sl   11:53   0:03
/usr/lib64/erlang/erts-8.2.2/bin/beam.smp -K true -P250000 -- -root
/usr/lib64/erlang -progname erl -- -home /var/lib/ejabberd -- -sname
ejabberd@localhost -noshell -noinput -noshell -noinput -mnesia dir
"/var/lib/ejabberd" -ejabberd log_rate_limit 100 log_rotate_size 10485760
log_rotate_count 1 log_rotate_date "" -s ejabberd -smp auto start
ejabberd 11130  0.0  0.0   4392   716 ?        Ss   11:53   0:00
erl_child_setup 16000
ejabberd 11176  0.0  0.0  11700  1060 ?        Ss   11:53   0:00 inet_gethost 4
ejabberd 11177  0.0  0.0  18040  1764 ?        S    11:53   0:00 inet_gethost 4
rbarlow  11179  0.0  0.0 119424   980 pts/3    S+   11:53   0:00 grep
--color=auto ejab


Additional info:
This is a good opportunity to write an SELinux policy for ejabberd. If we do
this, we can stop running it with /usr/bin/bash in the systemd unit.

-- 
You are receiving this mail because:
You are on the CC list for the bug.