[Bug 169247] Review request: rt3 - Request tracker 3

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review request: rt3 - Request tracker 3


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169247





------- Additional Comments From paul at city-fan.org  2005-10-13 06:35 EST -------
(In reply to comment #10)
> > The issue is nothing to do with networks; leaving the user there ensures that
> > any files left that are owned by the "rt3" user after deletion of the rt3
> > package are still owned by the "rt3" user if the package is subsequently
> > reinstalled. If the account is deleted on uninstall, the reinstallation may
> > result in a new rt3 user being created with a different UID to the original
> > one
> There is no such issue, because the rt3 package does not leave any file being
> owned by rt3 left around.

No log files, cache files, etc.? That's OK then.

> > I'm using httpd with SELinux without problems, albeit only serving static
> > pages
> > and a few cgi scripts. I know though that more complex packages such as
> > squirrelmail can work with SELinux enabled too.
> Does SELinux work for anything but trivial cases? IMO, no - It still leave much
> to be desired and so far has failed to prove sustainability.
> 
> > What does the package do with the files/directories in /var/lib/rt3? Read?
> > Write? Execute?
> I am not sure about all scenarios, but in mine, /var/lib/rt3 (which IMO should
> actually be /var/cache/rt3, but I had changed it to /var/lib to work around
> SELinux deficits) is essentally only used by Mason. 
> Both for writing and reading (It's a cache). I am not sure about executing.

Try:
# chcon -R system_u:object_r:httpd_cache_t /var/lib/rt3
and then try running in SELinux permissive mode to see what SELinux issues crop
up (check the output of "audit2allow -i /var/log/audit/audit.log") after running
rt3 for a short while.


-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.