semanage segmentation fault? (awstats)

[Stephen Smalley]

On Tue, 2008-02-05 at 10:47 -0500, Stephen Smalley wrote:
> On Tue, 2008-02-05 at 16:37 +0100, "Stanisław T. Findeisen" wrote:
> > Look I tried to intall awstats-6.6-1.fc7.noarch.rpm from Fedora release 
> > on Fedora 7 64-bit and got segmentation fault in semanage I think.
> > 
> > First I tried this:
> > 
> > [root at srv-1 download]# rpm --install ./awstats-6.6-1.fc7.noarch.rpm
> > /var/tmp/rpm-tmp.71040: line 12:  3964 Segmentation fault      semanage 
> > fcontext -a -t httpd_sys_script_exec_t 
> > '/usr/share/awstats/wwwroot/cgi-bin(/.*)?' 2> /dev/null
> > /var/tmp/rpm-tmp.71040: line 13:  3965 Segmentation fault      semanage 
> > fcontext -a -t httpd_sys_script_rw_t '/var/lib/awstats(/.*)?' 2> /dev/null
> > 
> > Then I realised I have HTTP server on, so I thought I will turn it off 
> > and try again (on the way I had to erase the RPM because it was 
> > considered "installed").
> > 
> > Then this happened:
> > 
> > [root at srv-1 download]# rpm --install ./awstats-6.6-1.fc7.noarch.rpm
> > /var/tmp/rpm-tmp.21042: line 12:  3995 Segmentation fault      semanage 
> > fcontext -a -t httpd_sys_script_exec_t 
> > '/usr/share/awstats/wwwroot/cgi-bin(/.*)?' 2> /dev/null
> > /var/tmp/rpm-tmp.21042: line 13:  3996 Segmentation fault      semanage 
> > fcontext -a -t httpd_sys_script_rw_t '/var/lib/awstats(/.*)?' 2> /dev/null
> > 
> > I do not know what /var/tmp/rpm-tmp.* is, but I suppose that is an RPM 
> > install script or something which comes with RPM (right?). After these 2 
> > steps the /var/tmp directory was empty so I couldn't examine that file.
> > 
> > After that I downloaded awstats-6.7-2.fc7.noarch.rpm from Fedora updates 
> > and it installed fine (although I haven't tested it yet).
> > 
> > I have also found this in /var/log/messages:
> > 
> > Feb  5 15:53:44 srv-1 kernel: semanage[3964]: segfault at 
> > 0000000000000000 rip 00002b610d7e9b49 rsp 00007fffa20be6b0 error 4
> > Feb  5 15:53:44 srv-1 kernel: semanage[3965]: segfault at 
> > 0000000000000000 rip 00002b2754535b49 rsp 00007fff5b3744b0 error 4
> > Feb  5 15:56:33 srv-1 kernel: semanage[3995]: segfault at 
> > 0000000000000000 rip 00002b0a226c9b49 rsp 00007fff8d1e0300 error 4
> > Feb  5 15:56:33 srv-1 kernel: semanage[3996]: segfault at 
> > 0000000000000000 rip 00002b0feea21b49 rsp 00007fffc0e86fc0 error 4
> > 
> > What do you think guys?
> 
> Bugzilla it, please, against policycoreutils.  Please include your
> versions of libsepol, libsemanage, and policycoreutils.

Also, can you reproduce it by hand now?  i.e. running semanage with
those arguments from the command line.

-- 
Stephen Smalley
National Security Agency