-
Bug
-
Resolution: Unresolved
-
Normal
-
rhel-10.1
-
selinux-policy-42.1.16-1.el10
-
No
-
Moderate
-
1
-
rhel-security-selinux
-
25
-
1
-
QE ack
-
False
-
False
-
-
No
-
SELINUX 260218: 18
-
-
Pass
-
Automated
-
Unspecified Release Note Type - Unknown
-
Unspecified
-
Unspecified
-
Unspecified
-
None
What were you trying to do that didn't work?
When executing newaliases command, the /etc/aliases.lmdb file is being created with wrong etc_t context, instead of etc_aliases_t:
# matchpathcon /etc/aliases.lmdb
/etc/aliases.lmdb system_u:object_r:etc_aliases_t:s0
# rm /etc/aliases.lmdb || true
# newaliases
# ls -Z /etc/aliases.lmdb
unconfined_u:object_r:etc_t:s0 /etc/aliases.lmdb
The reason for this is missing the following rule in policy/modules/contrib/mta.if (mta_filetrans_named_content interface):
mta_etc_filetrans_aliases($1, "aliases.lmdb")
What is the impact of this issue to you?
Need to fix the label using restorecon.
Please provide the package NVR for which the bug is seen:
selinux-policy-40.13.26-1.el10.noarch
Fedora Rawhide as well
How reproducible is this bug?:
Always see above.
- links to
-
RHBA-2025:155519
selinux-policy update