Bug ? on "semanage fcontext" when directory name is starting with Upper case

[Shintaro Fujiwara]

Hi, I'm playing with my web server and found a strange incident.

I try to enable write to certain directory in /var/www/dir in SELinux way.

I know that fancy way of doing this is to type,

# semanage fcontext -a -t httpd_sys_rw_content_t /var/www/dir

After successfully added rw type to directory, I will type

# restorecon -rv /var/www

It works fine.

But, when I name the very directory "/var/www/Dir" not "/var/www/dir"

first command works fine and I could see by

# semanage fcontext -l |grep "/var/www"

The rw type is set allright.

BUT, when I restorecon the /var/www, nothing happens and with force option,
no use.

Is this a bug on "semanage fcontext" or my box is broken?

My solution now is just name the directory "/var/www/dir" and post this
question.

Thanks.

[root@xxxx]# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   enforcing
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      28

[root@xxxx]# rpm -qa|grep selinux
selinux-policy-3.12.1-119.fc20.noarch
libselinux-2.2.1-6.fc20.x86_64
libselinux-utils-2.2.1-6.fc20.x86_64
selinux-policy-targeted-3.12.1-119.fc20.noarch
libselinux-python-2.2.1-6.fc20.x86_64
php-pecl-selinux-0.3.1-12.fc20.x86_64
libselinux-devel-2.2.1-6.fc20.x86_64



-- 

"segatex" SELinux tool

http://sourceforge.net/projects/segatex/

[Shintaro Fujiwara]

And I cannot delete context either.

Although I can see by semanage fcontext -l , SELinux says I have not set
"/var/www/Dir" context at all.


2014-02-08 Shintaro Fujiwara <shintaro.fujiwara(a)gmail.com&gt;:

>  Hi, I'm playing with my web server and found a strange incident.
>
>  I try to enable write to certain directory in /var/www/dir in SELinux way.
>
>  I know that fancy way of doing this is to type,
>
>  # semanage fcontext -a -t httpd_sys_rw_content_t /var/www/dir
>
>  After successfully added rw type to directory, I will type
>
>  # restorecon -rv /var/www
>
>  It works fine.
>
>  But, when I name the very directory "/var/www/Dir" not
> "/var/www/dir"
>
>  first command works fine and I could see by
>
>  # semanage fcontext -l |grep "/var/www"
>
>  The rw type is set allright.
>
>  BUT, when I restorecon the /var/www, nothing happens and with force
>  option, no use.
>
>  Is this a bug on "semanage fcontext" or my box is broken?
>
>  My solution now is just name the directory "/var/www/dir" and post this
>  question.
>
>  Thanks.
>
>  [root@xxxx]# sestatus
>  SELinux status:                 enabled
>  SELinuxfs mount:                /sys/fs/selinux
>  SELinux root directory:         /etc/selinux
>  Loaded policy name:             targeted
>  Current mode:                   enforcing
>  Mode from config file:          enforcing
>  Policy MLS status:              enabled
>  Policy deny_unknown status:     allowed
>  Max kernel policy version:      28
>
>  [root@xxxx]# rpm -qa|grep selinux
>  selinux-policy-3.12.1-119.fc20.noarch
>  libselinux-2.2.1-6.fc20.x86_64
>  libselinux-utils-2.2.1-6.fc20.x86_64
>  selinux-policy-targeted-3.12.1-119.fc20.noarch
>  libselinux-python-2.2.1-6.fc20.x86_64
>  php-pecl-selinux-0.3.1-12.fc20.x86_64
>  libselinux-devel-2.2.1-6.fc20.x86_64
>
>
>
>  --
>
>  "segatex" SELinux tool
>
>  http://sourceforge.net/projects/segatex/
>
>  

-- 
日本にヘヴィメタル・ハードロックを根付かせるページ
http://www.heavymetalhardrock.tk/

世界中でセキュアＯＳのSELinuxを使いやすくするフリーソフト
http://sourceforge.net/projects/segatex/

CMS（PHPとPostgreSQLを使ったフリーソフト）
http://sourceforge.net/projects/webon/

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/08/2014 02:18 PM, Shintaro Fujiwara wrote:
>  semanage fcontext -a -t httpd_sys_rw_content_t /var/www/dir
Works fine for me.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iEYEARECAAYFAlL4GNwACgkQrlYvE4MpobOCzwCeMlYlTMHOoDjG/MxIPTEELcz2
> FzYAnRwjIF8IOkbPi0dfsxmUEjYC+Nit
> =WjXF
> -----END PGP SIGNATURE-----

[Shintaro Fujiwara]

I might have miss-lead the subject.

The reality is, after successfully added the context, restorecon was
anable to restore the context when the directory mame is "Smarty".

So, I should have posted on restorecon matter.

When the directory name is "smarty", restorecon restores the context
to httpd_rw_sys_content_t, but, when the name is "Smarty", returns
nothing and could not delete by semanage, either.

2014-02-10 9:10 GMT+09:00, Daniel J Walsh <dwalsh(a)redhat.com&gt;:
>  -----BEGIN PGP SIGNED MESSAGE-----
>  Hash: SHA1
>
>  On 02/08/2014 02:18 PM, Shintaro Fujiwara wrote:
> > semanage fcontext -a -t httpd_sys_rw_content_t /var/www/dir
>  Works fine for me.
> >  -----BEGIN PGP SIGNATURE-----
> >  Version: GnuPG v1
> >  Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> >
> >  iEYEARECAAYFAlL4GNwACgkQrlYvE4MpobOCzwCeMlYlTMHOoDjG/MxIPTEELcz2
> >  FzYAnRwjIF8IOkbPi0dfsxmUEjYC+Nit
> >  =WjXF
> >  -----END PGP SIGNATURE----- 
>  

-- 
日本にヘヴィメタル・ハードロックを根付かせるページ
http://www.heavymetalhardrock.tk/

世界中でセキュアＯＳのSELinuxを使いやすくするフリーソフト
http://sourceforge.net/projects/segatex/

CMS（PHPとPostgreSQLを使ったフリーソフト）
http://sourceforge.net/projects/webon/

[Shintaro Fujiwara]

Sorry for me.

I could restorecon allright.



2014-02-10 12:58 GMT+09:00 Shintaro Fujiwara <shintaro.fujiwara(a)gmail.com&gt;:

>  I might have miss-lead the subject.
>
>  The reality is, after successfully added the context, restorecon was
>  anable to restore the context when the directory mame is "Smarty".
>
>  So, I should have posted on restorecon matter.
>
>  When the directory name is "smarty", restorecon restores the context
>  to httpd_rw_sys_content_t, but, when the name is "Smarty", returns
>  nothing and could not delete by semanage, either.
>
>  2014-02-10 9:10 GMT+09:00, Daniel J Walsh <dwalsh(a)redhat.com&gt;:
>  > -----BEGIN PGP SIGNED MESSAGE-----
>  > Hash: SHA1
>  >
>  > On 02/08/2014 02:18 PM, Shintaro Fujiwara wrote:
>  >> semanage fcontext -a -t httpd_sys_rw_content_t /var/www/dir
>  > Works fine for me.
> >  > -----BEGIN PGP SIGNATURE-----
> >  > Version: GnuPG v1
> >  > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> >  >
> >  > iEYEARECAAYFAlL4GNwACgkQrlYvE4MpobOCzwCeMlYlTMHOoDjG/MxIPTEELcz2
> >  > FzYAnRwjIF8IOkbPi0dfsxmUEjYC+Nit
> >  > =WjXF
> >  > -----END PGP SIGNATURE----- 
>  >
>
>
>  --
>  日本にヘヴィメタル・ハードロックを根付かせるページ
>  http://www.heavymetalhardrock.tk/
>
>  世界中でセキュアＯＳのSELinuxを使いやすくするフリーソフト
>  http://sourceforge.net/projects/segatex/
>
>  CMS（PHPとPostgreSQLを使ったフリーソフト）
>  http://sourceforge.net/projects/webon/
>  


-- 
日本にヘヴィメタル・ハードロックを根付かせるページ
http://www.heavymetalhardrock.tk/

世界中でセキュアＯＳのSELinuxを使いやすくするフリーソフト
http://sourceforge.net/projects/segatex/

CMS（PHPとPostgreSQLを使ったフリーソフト）
http://sourceforge.net/projects/webon/