[Bug 188359] Review Request: bugzilla - bug tracking tool

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review Request: bugzilla - bug tracking tool


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188359





------- Additional Comments From paul at city-fan.org  2006-06-26 14:01 EST -------
(In reply to comment #43)
> Finally, I'm pretty sure there will be selinux problems with this package. 
> Unfortunately I have no real way to test it at the moment, and I don't think
> selinux issues are blockers right now.  But I do suggest you work with the
> selinux folks and possibly Paul Howarth, who has been doing a bunch of work on
> packaging selinux rules.

If anyone would like to test bugzilla with FC5 (or later) SELinux, I've spent
half an hour knocking together a first pass at a policy. I'll attach the
relevant files (bugzilla.{if,fc,te}) shortly.

Instructions:

Enable CGI scripts:
# setsebool -P httpd_enable_cgi 1

Create an SELinux module-build environment:
# yum install checkpolicy
# cd /root
# mkdir selinux.local
# cd selinux.local
# chcon -R -t usr_t .
# ln -s /usr/share/selinux/devel/Makefile . 

Download the bugzilla policy source files to the /root/selinux.local directory
and run "make" in that directory, which should create a policy module package,
bugzilla.pp

Load the policy module:
# semodule -i bugzilla.pp

Fix up directory contexts:
# restorecon -rv /var/lib/bugzilla /usr/share/bugzilla

Then give it a try and please report back any AVCs you get, and how you
triggered them.


-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.