Uploaded image for project: 'JBoss Web Server'
  1. JBoss Web Server
  2. JWS-724

jws5_tomcat_t domain shouldn't be in unconfined_domain

    XMLWordPrintable

Details

    • Documentation (Ref Guide, User Guide, etc.), User Experience
    • The JBoss Web Server 5.0 uses the `jws5_tomcat_t` selinux domain, rather than the unconfined `tomcat_t` domain for improved security.
    • Documented as Resolved Issue
    • Hide

      sesearch -ACS -s jws5_tomcat_t -t shadow_t -c file -p read
      seinfo -tjws5_tomcat_t -x
      check no presence of unconfined_domain_type or any other *unconfined* label

      Show
      sesearch -ACS -s jws5_tomcat_t -t shadow_t -c file -p read seinfo -tjws5_tomcat_t -x check no presence of unconfined_domain_type or any other *unconfined* label

    Description

      +++ This bug was initially created as a clone of Bug #1432083 +++

      Description of problem:

      It seems tomcat_t domain is in unconfined_domain, then any process which is having tomcat_t domain can access to any file. Maybe there is a bug in policy file.

      JWS5 domain name is : jws5_tomcat_t

      There shouldn't be any unconfined_domain_type associated with jws5 domain name

      Attachments

        Issue Links

          clones

          Bug - A problem that impairs or prevents the functions of the product. JWS-695 tomcat7_t and tomcat8_t domains are in unconfined_domain

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              rhn-support-csutherl Coty Sutherland
              rhn-support-csutherl Coty Sutherland
              Jan Onderka Jan Onderka
              Tyler Kelly Tyler Kelly (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: