Details
-
Bug
-
Status: Open (View Workflow)
-
Major
-
Resolution: Unresolved
-
11.8.8
-
None
-
None
-
None
-
AlmaLinux 10.2, RockyLinux 10.2
-
Can result in unexpected behaviour
Description
In environments where selinux-policy-extra is not installed, contexts are assigned as intended by mysql-selinux; however, in environments where selinux-policy-extra is installed, inappropriate contexts are assigned.
Environments where selinux-policy-extra is not installed:
$ sudo dnf list installed | grep selinux
|
mysql-selinux.noarch 1.0.14-1.el10_0 @appstream
|
selinux-policy.noarch 42.1.18-4.el10_2.1 @baseos
|
selinux-policy-targeted.noarch 42.1.18-4.el10_2.1 @baseos
|
$ ps -eZ | grep mariadb
|
system_u:system_r:mysqld_t:s0 1006 ? 01:01:23 mariadbd
|
$ sudo ls -lZ /var/lib/mysql/
|
合計 166416
|
-rw-rw----. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 425984 6月 16 01:44 aria_log.00000001
|
-rw-rw----. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 52 6月 16 01:44 aria_log_control
|
-rw-rw----. 1 mysql mysql system_u:object_r:mysqld_db_t:s0 9 6月 16 01:45 ddl_recovery.log
|
-rw-rw----. 1 mysql mysql system_u:object_r:mysqld_db_t:s0 16921 6月 16 01:44 ib_buffer_pool
|
-rw-rw----. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 100663296 6月 29 12:16 ib_logfile0
|
-rw-rw----. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 12582912 6月 29 11:38 ibdata1
|
-rw-rw----. 1 mysql mysql system_u:object_r:mysqld_db_t:s0 12582912 6月 18 15:54 ibtmp1
|
-rw-r--r--. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 14 6月 7 21:29 mariadb_upgrade_info
|
-rw-rw----. 1 mysql mysql system_u:object_r:mysqld_db_t:s0 0 6月 7 21:30 multi-master.info
|
drwx------. 2 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 4096 6月 7 21:28 mysql
|
srwxrwxrwx. 1 mysql mysql system_u:object_r:mysqld_var_run_t:s0 0 6月 16 01:45 mysql.sock
|
drwx------. 2 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 20 6月 7 21:28 performance_schema
|
drwx------. 2 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 8192 6月 7 21:29 sys
|
-rw-rw----. 1 mysql mysql system_u:object_r:mysqld_db_t:s0 5 6月 16 01:45 tailscale.pid
|
-rw-rw----. 1 mysql mysql system_u:object_r:mysqld_db_t:s0 24576 6月 16 01:45 tc.log
|
-rw-rw----. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 16777216 6月 29 11:37 undo001
|
-rw-rw----. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 16777216 6月 29 11:37 undo002
|
-rw-rw----. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 10485760 6月 29 11:37 undo003
|
Environments where selinux-policy-extra is installed:
The process and mysql.sock have different contexts.
$ sudo dnf list installed | grep selinux
|
mysql-selinux.noarch 1.0.14-1.el10_0 @appstream
|
selinux-policy.noarch 42.1.18-4.el10_2.1 @baseos
|
selinux-policy-extra.noarch 42.1.18-4.el10_2.1 @crb
|
selinux-policy-targeted.noarch 42.1.18-4.el10_2.1 @baseos
|
selinux-policy-targeted-extra.noarch 42.1.18-4.el10_2.1 @crb
|
$ ps -eZ | grep mariadb
|
system_u:system_r:unconfined_service_t:s0 2814 ? 00:00:00 mariadbd
|
$ sudo ls -lZ /var/lib/mysql/
|
合計 154068
|
-rw-rw----. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 417792 6月 29 12:20 aria_log.00000001
|
-rw-rw----. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 52 6月 29 12:20 aria_log_control
|
-rw-rw----. 1 mysql mysql system_u:object_r:mysqld_db_t:s0 9 6月 29 12:20 ddl_recovery.log
|
-rw-rw----. 1 mysql mysql system_u:object_r:mysqld_db_t:s0 806 6月 29 12:20 ib_buffer_pool
|
-rw-rw----. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 100663296 6月 29 12:19 ib_logfile0
|
-rw-rw----. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 12582912 6月 29 12:19 ibdata1
|
-rw-rw----. 1 mysql mysql system_u:object_r:mysqld_db_t:s0 12582912 6月 29 12:20 ibtmp1
|
-rw-rw----. 1 mysql mysql system_u:object_r:mysqld_db_t:s0 5 6月 29 12:20 localhost.pid
|
-rw-r--r--. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 14 6月 29 12:19 mariadb_upgrade_info
|
-rw-rw----. 1 mysql mysql system_u:object_r:mysqld_db_t:s0 0 6月 29 12:20 multi-master.info
|
drwx------. 2 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 4096 6月 29 12:19 mysql
|
srwxrwxrwx. 1 mysql mysql system_u:object_r:mysqld_db_t:s0 0 6月 29 12:20 mysql.sock
|
drwx------. 2 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 20 6月 29 12:19 performance_schema
|
drwx------. 2 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 8192 6月 29 12:19 sys
|
-rw-rw----. 1 mysql mysql system_u:object_r:mysqld_db_t:s0 24576 6月 29 12:20 tc.log
|
drwx------. 2 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 20 6月 29 12:19 test
|
-rw-rw----. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 10485760 6月 29 12:19 undo001
|
-rw-rw----. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 10485760 6月 29 12:19 undo002
|
-rw-rw----. 1 mysql mysql unconfined_u:object_r:mysqld_db_t:s0 10485760 6月 29 12:19 undo003
|