[Bug 1109537] New: gear command line cannot be run with a confined user

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1109537

Bug ID: 1109537
           Summary: gear command line cannot be run with a confined user
           Product: Fedora
           Version: 20
         Component: geard
          Assignee: [e-mail]
          Reporter: [e-mail]
        QA Contact: [e-mail]
                CC: [e-mail], [e-mail],
                    [e-mail]

Description of problem:
$ gear           
zsh: permission denied: gear

$ id -Z
staff_u:staff_r:staff_t:s0-s0:c0.c1023

WIth setenforce 0, it work fine.

# rpm -q selinux-policy
selinux-policy-3.12.1-166.fc20.noarch

I am not sure if gear can be run as a simple user, but i would at least expect
to be able to see the command line options, since there is no manpage.

[Bug 1109537] gear command line cannot be run with a confined user

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1109537

John Skeoch  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|[e-mail]             |[e-mail]

[Bug 1109537] gear command line cannot be run with a confined user

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1109537

Lokesh Mandvekar  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]
           Assignee|[e-mail]            |[e-mail]

[Bug 1109537] gear command line cannot be run with a confined user

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1109537

Lokesh Mandvekar  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|[e-mail]            |[e-mail]

--- Comment #2 from Lokesh Mandvekar  ---
Hi Michael,

Is this with the latest build? Works fine for me in Enforcing.

$ id -Z
unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023

$ rpm -q selinux-policy
selinux-policy-3.13.1-63.fc21.noarch

$ rpm -q geard
geard-0-0.13.git6850c8d.fc21.x86_64

[Bug 1109537] gear command line cannot be run with a confined user

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1109537

--- Comment #3 from Michael Scherer  ---
You are in enforcing, but without a confined user.

[Bug 1109537] gear command line cannot be run with a confined user

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1109537

--- Comment #4 from Lokesh Mandvekar  ---
argh, I see...nvm me.

Perhaps dwalsh has an answer.

[Bug 1109537] gear command line cannot be run with a confined user

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1109537

Daniel Walsh  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED

--- Comment #5 from Daniel Walsh  ---
Is there a reason for a normal (Non admin) user to run this?

[Bug 1109537] gear command line cannot be run with a confined user

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1109537

--- Comment #6 from Michael Scherer  ---
Well, in my case, it was to read the options and help.
I think it can also be used to manage a remote geard agent.

[Bug 1109537] gear command line cannot be run with a confined user

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1109537

--- Comment #7 from Daniel Walsh  ---
Currently we don't allow staff_t to execute all applications,  I guess we could
allow that.

[Bug 1109537] gear command line cannot be run with a confined user

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1109537

--- Comment #8 from Lokesh Mandvekar  ---
Michael,

geard has been retired on fedora. Perhaps this can be closed?

[Bug 1109537] gear command line cannot be run with a confined user

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1109537

--- Comment #9 from Michael Scherer  ---
I guess someone could autoclose all tickets for it, yeah.

[Bug 1109537] gear command line cannot be run with a confined user

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1109537

Lokesh Mandvekar  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |CLOSED
         Resolution|---                         |WONTFIX
        Last Closed|                            |2014-09-28 09:06:26

--- Comment #10 from Lokesh Mandvekar  ---
Package retired, bug closed.