Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Incorrect SELinux label of the domU qrexec daemon #4279

Closed
DemiMarie opened this issue Sep 7, 2018 · 1 comment
Closed

Incorrect SELinux label of the domU qrexec daemon #4279

DemiMarie opened this issue Sep 7, 2018 · 1 comment
Labels
C: core diagnosed Technical diagnosis has been performed (see issue comments). P: default Priority: default. Default priority for new issues, to be replaced given sufficient information. T: bug Type: bug report. A problem or defect resulting in unintended behavior in something that exists.

Comments

@DemiMarie
Copy link

DemiMarie commented Sep 7, 2018

Qubes OS version:

Qubes release 4.0 (R4.0)

Affected component(s):

qubes-core-admin


Steps to reproduce the behavior:

Start a VM (only tested with Fedora 28) with SELinux enabled

Expected behavior:

Qrexec-daemon starts normally

Actual behavior:

qrexec daemon won’t start

General notes:

One of the culprits is that the domU qrexec daemon is incorrectly labeled, and cannot do its job. I believe that setting it to unconfined_exec_t would fix it.


Related issues:

#4278, #4239

@andrewdavidwong andrewdavidwong added T: bug Type: bug report. A problem or defect resulting in unintended behavior in something that exists. C: core labels Sep 7, 2018
@andrewdavidwong andrewdavidwong added this to the Release 4.0 updates milestone Sep 7, 2018
This was referenced Aug 3, 2019
@marmarek
Copy link
Member

Fixed by QubesOS/qubes-core-qrexec#84

@andrewdavidwong andrewdavidwong added P: default Priority: default. Default priority for new issues, to be replaced given sufficient information. diagnosed Technical diagnosis has been performed (see issue comments). labels Jan 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
C: core diagnosed Technical diagnosis has been performed (see issue comments). P: default Priority: default. Default priority for new issues, to be replaced given sufficient information. T: bug Type: bug report. A problem or defect resulting in unintended behavior in something that exists.
Projects
None yet
Development

No branches or pull requests

3 participants