lib389 - valgrind wrapper for ns-slapd doesn't work in Enforcing mode

[389-ds-bot]

Cloned from Pagure issue: https://pagure.io/389-ds-base/issue/48300

• Created at 2015-09-29 15:24:34 by vashirov (@vashirov)
• Closed at 2020-02-12 17:24:21 as wontfix
• Assigned to nobody

---

When test (e.g. ticket48226) is executed with SELinux in Enforcing mode, it fails. In denials log:

time->Tue Sep 29 11:06:45 2015
type=SYSCALL msg=audit(1443517605.721:964): arch=c000003e syscall=21 success=no exit=-13 a0=d29990 a1=1 a2=7ffffd266730 a3=7ffffd266650 items=0 ppid=636 pid=640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ns-slapd" exe="/usr/bin/bash" subj=system_u:system_r:dirsrv_t:s0 key=(null)
type=AVC msg=audit(1443517605.721:964): avc:  denied  { execute } for  pid=640 comm="ns-slapd" name="valgrind" dev="vda3" ino=50465109 scontext=system_u:system_r:dirsrv_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file

[389-ds-bot]

Comment from vashirov (@vashirov) at 2017-02-11 22:55:36

Metadata Update from @vashirov:

• Issue set to the milestone: lib389 1.0.3

[389-ds-bot]

Comment from firstyear (@Firstyear) at 2017-04-04 04:57:40

Is this still an issues now @vashirov ?

[389-ds-bot]

Comment from firstyear (@Firstyear) at 2017-04-04 04:57:43

Metadata Update from @Firstyear:

• Custom field reviewstatus adjusted to new
• Issue close_status updated to: None

[389-ds-bot]

Comment from vashirov (@vashirov) at 2020-02-12 17:24:23

Metadata Update from @vashirov:

• Custom field reviewstatus adjusted to None (was: new)
• Issue close_status updated to: wontfix
• Issue set to the milestone: None (was: lib389 1.0.3)
• Issue status updated to: Closed (was: Open)