[Bug 797928] New: jetty-8.1.0-4.fc17.noarch causes SELinux AVCs, won't start in enforcing mode
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: jetty-8.1.0-4.fc17.noarch causes SELinux AVCs, won't start in enforcing mode
https://bugzilla.redhat.com/show_bug.cgi?id=797928
Summary: jetty-8.1.0-4.fc17.noarch causes SELinux AVCs, won't
start in enforcing mode
Product: Fedora
Version: 17
Platform: x86_64
OS/Version: Linux
Status: NEW
Severity: unspecified
Priority: unspecified
Component: jetty
AssignedTo: sochotni(a)redhat.com
ReportedBy: selinux(a)gmail.com
QAContact: extras-qa(a)fedoraproject.org
CC: overholt(a)redhat.com, sochotni(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org
Classification: Fedora
Story Points: ---
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Description of problem:
jetty-8.1.0-4.fc17.noarch won't start in enforcing mode: it spews SELinux AVCs:
#============= initrc_t ==============
allow initrc_t http_cache_port_t:tcp_socket name_bind;
allow initrc_t hugetlbfs_t:file read;
allow initrc_t self:process execmem;
Appears that /usr/share/jetty/bin/jetty.sh exec's Java while running under
systemd's SELinux context ('initrc_t').
Shouldn't jetty/java transition to a different context (e.g., httpd_t, or a new
'jetty_t')? If so, probably need to add something so it can access
/var/log/jetty.
Here are the actual AVCs from /var/log/audit/audit.log when I booted with
'enforcing=0':
type=SERVICE_START msg=audit(1330353641.267:29): pid=0 uid=0 auid=4294967295
ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="jetty"
exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1330353642.590:31): avc: denied { read } for pid=747
comm="java" path=2F616E6F6E5F6875676570616765202864656C6574656429
dev="hugetlbfs" ino=17376 scontext=system_u:system_r:initrc_t:s0
tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=file
type=SYSCALL msg=audit(1330353642.590:31): arch=c000003e syscall=9 success=no
exit=-12 a0=0 a1=200000 a2=3 a3=40022 items=0 ppid=1 pid=747 auid=4294967295
uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none)
ses=4294967295 comm="java"
exe="/usr/lib/jvm/java-1.7.0-openjdk-1.7.0.3.x86_64/jre/bin/java"
subj=system_u:system_r:initrc_t:s0 key=(null)
type=AVC msg=audit(1330353643.581:33): avc: denied { execmem } for pid=747
comm="java" scontext=system_u:system_r:initrc_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=process
type=SYSCALL msg=audit(1330353643.581:33): arch=c000003e syscall=9 success=yes
exit=140008165998592 a0=7f5631000000 a1=270000 a2=7 a3=32 items=0 ppid=1
pid=747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
tty=(none) ses=4294967295 comm="java"
exe="/usr/lib/jvm/java-1.7.0-openjdk-1.7.0.3.x86_64/jre/bin/java"
subj=system_u:system_r:initrc_t:s0 key=(null)
type=AVC msg=audit(1330353671.705:53): avc: denied { name_bind } for pid=747
comm="java" src=8080 scontext=system_u:system_r:initrc_t:s0
tcontext=system_u:object_r:http_cache_port_t:s0 tclass=tcp_socket
type=SYSCALL msg=audit(1330353671.705:53): arch=c000003e syscall=49 success=yes
exit=0 a0=39 a1=7f563a0c74c0 a2=1c a3=7f563a0c7230 items=0 ppid=1 pid=747
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
tty=(none) ses=4294967295 comm="java"
exe="/usr/lib/jvm/java-1.7.0-openjdk-1.7.0.3.x86_64/jre/bin/java"
subj=system_u:system_r:initrc_t:s0 key=(null)
type=SOCKADDR msg=audit(1330353671.705:53):
saddr=0A001F90000000000000000000000000000000000000000000000000
Version-Release number of selected component (if applicable):
jetty-8.1.0-4.fc17.noarch
selinux-policy-3.10.0-93.fc17.noarch
How reproducible:
Every boot
Steps to Reproduce:
1. install jetty
2. boot
3.
Actual results:
Expected results:
Additional info:
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
10 years, 8 months
[Bug 820963] New: javax:activation removed from pom
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: javax:activation removed from pom
https://bugzilla.redhat.com/show_bug.cgi?id=820963
Summary: javax:activation removed from pom
Product: Fedora
Version: rawhide
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: unspecified
Priority: unspecified
Component: apache-commons-email
AssignedTo: SpikeFedora(a)gmail.com
ReportedBy: puntogil(a)libero.it
QAContact: extras-qa(a)fedoraproject.org
CC: SpikeFedora(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org
Classification: Fedora
Story Points: ---
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
Created attachment 583833
--> https://bugzilla.redhat.com/attachment.cgi?id=583833
javax:activation removed from pom
Description of problem:
sonar-email-notifications-plugin 3.0 require apache-commons-email but its pom
there is javax:activation and breaks the build
this patch remove activation
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
10 years, 8 months
[Bug 911365] New: maven tests don't bring in aopappliance dependencies
by Red Hat Bugzilla
Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=911365
Bug ID: 911365
Summary: maven tests don't bring in aopappliance dependencies
Product: Fedora
Version: 18
Component: maven
Severity: medium
Priority: unspecified
Reporter: orion(a)cora.nwra.com
Description of problem:
Running org.apache.rat.mp.RatCheckMojoTest
Tests run: 3, Failures: 0, Errors: 3, Skipped: 0, Time elapsed: 1.887 sec <<<
FAILURE!
testIt1(org.apache.rat.mp.RatCheckMojoTest) Time elapsed: 1.634 sec <<< ERROR!
java.lang.NoClassDefFoundError: [Lorg/aopalliance/intercept/MethodInterceptor;
at java.lang.Class.getDeclaredMethods0(Native Method)
at java.lang.Class.privateGetDeclaredMethods(Class.java:2451)
at java.lang.Class.getDeclaredMethods(Class.java:1810)
at
com.google.inject.internal.ProviderMethodsModule.getProviderMethods(ProviderMethodsModule.java:83)
at
com.google.inject.internal.ProviderMethodsModule.configure(ProviderMethodsModule.java:75)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=o0kaLke3Zy&a=cc_unsubscribe
10 years, 9 months
[Bug 874651] New: apache-james: Obfuscated code
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=874651
Bug ID: 874651
QA Contact: extras-qa(a)fedoraproject.org
Severity: unspecified
Version: rawhide
Priority: unspecified
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, sochotni(a)redhat.com
Assignee: sochotni(a)redhat.com
Summary: apache-james: Obfuscated code
Regression: ---
Story Points: ---
Classification: Fedora
OS: Unspecified
Reporter: mizdebsk(a)redhat.com
Type: Bug
Documentation: ---
Hardware: Unspecified
Mount Type: ---
Status: NEW
Component: apache-james-project
Product: Fedora
Description of problem:
apache-james-project is bubdling obfuscated JavaScript code that is dual
licensed GPL/MIT, however it violates GPLv2 license (because no source code is
provided, only obfuscated code, which is not source code, but object code) and
violates MIT license by not including the text of the license.
It also includes a copy of galleria, which is MIT-licensed, but no license text
is included either.
The license tag says "ASL 2.0", but it should be "ASL 2.0 and MIT and MIT or
GPLv2"
Version-Release number of selected component (if applicable):
1.6-3
--
You are receiving this mail because:
You are on the CC list for the bug.
10 years, 9 months
[Bug 915437] New: bootstrap has installed but unpackaged files
by Red Hat Bugzilla
Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=915437
Bug ID: 915437
Summary: bootstrap has installed but unpackaged files
Product: Fedora
Version: rawhide
Component: ant
Severity: unspecified
Priority: unspecified
Reporter: gregswift(a)gmail.com
Created attachment 702472
--> https://bugzilla.redhat.com/attachment.cgi?id=702472&action=edit
Patch that clens out unpackaged files.
Description of problem:
Went to use spec to build ANT for RHEL and when I ran through the build in
bootstrap mode it found a bunch of files that were installed but unpackaged.
These files belong to the subpackages that are conditionally excluded during
bootstrap. I updated the bootstrap cleanup section of %install to remove the
files.
Version-Release number of selected component (if applicable):
1.8.4-6
How reproducible:
I'll concede I only tried in rhel6, not fedora.
Steps to Reproduce:
1. git clone http://pkgs.fedoraproject.org/cgit/ant.git/
2. move the spec and sources to appropriate directories in rpmbuild tree
3. rpmbuild --define 'with_bootstrap 1' ant.spec
Actual results:
error: Installed (but unpackaged) file(s) found:
/usr/share/ant/lib/ant-antlr.jar
/usr/share/ant/lib/ant-apache-bcel.jar
/usr/share/ant/lib/ant-apache-bsf.jar
/usr/share/ant/lib/ant-apache-log4j.jar
/usr/share/ant/lib/ant-apache-oro.jar
/usr/share/ant/lib/ant-apache-regexp.jar
/usr/share/ant/lib/ant-apache-resolver.jar
/usr/share/ant/lib/ant-apache-xalan2.jar
/usr/share/ant/lib/ant-commons-logging.jar
/usr/share/ant/lib/ant-commons-net.jar
/usr/share/ant/lib/ant-javamail.jar
/usr/share/ant/lib/ant-jdepend.jar
/usr/share/ant/lib/ant-jsch.jar
/usr/share/ant/lib/ant-junit4.jar
/usr/share/java/ant/ant-antlr.jar
/usr/share/java/ant/ant-apache-bcel.jar
/usr/share/java/ant/ant-apache-bsf.jar
/usr/share/java/ant/ant-apache-log4j.jar
/usr/share/java/ant/ant-apache-oro.jar
/usr/share/java/ant/ant-apache-regexp.jar
/usr/share/java/ant/ant-apache-resolver.jar
/usr/share/java/ant/ant-apache-xalan2.jar
/usr/share/java/ant/ant-commons-logging.jar
/usr/share/java/ant/ant-commons-net.jar
/usr/share/java/ant/ant-javamail.jar
/usr/share/java/ant/ant-jdepend.jar
/usr/share/java/ant/ant-jsch.jar
/usr/share/java/ant/ant-junit4.jar
RPM build errors:
Installed (but unpackaged) file(s) found:
/usr/share/ant/lib/ant-antlr.jar
/usr/share/ant/lib/ant-apache-bcel.jar
/usr/share/ant/lib/ant-apache-bsf.jar
/usr/share/ant/lib/ant-apache-log4j.jar
/usr/share/ant/lib/ant-apache-oro.jar
/usr/share/ant/lib/ant-apache-regexp.jar
/usr/share/ant/lib/ant-apache-resolver.jar
/usr/share/ant/lib/ant-apache-xalan2.jar
/usr/share/ant/lib/ant-commons-logging.jar
/usr/share/ant/lib/ant-commons-net.jar
/usr/share/ant/lib/ant-javamail.jar
/usr/share/ant/lib/ant-jdepend.jar
/usr/share/ant/lib/ant-jsch.jar
/usr/share/ant/lib/ant-junit4.jar
/usr/share/java/ant/ant-antlr.jar
/usr/share/java/ant/ant-apache-bcel.jar
/usr/share/java/ant/ant-apache-bsf.jar
/usr/share/java/ant/ant-apache-log4j.jar
/usr/share/java/ant/ant-apache-oro.jar
/usr/share/java/ant/ant-apache-regexp.jar
/usr/share/java/ant/ant-apache-resolver.jar
/usr/share/java/ant/ant-apache-xalan2.jar
/usr/share/java/ant/ant-commons-logging.jar
/usr/share/java/ant/ant-commons-net.jar
/usr/share/java/ant/ant-javamail.jar
/usr/share/java/ant/ant-jdepend.jar
/usr/share/java/ant/ant-jsch.jar
/usr/share/java/ant/ant-junit4.jar
Expected results:
Checking for unpackaged file(s): /usr/lib/rpm/check-files
/home/greg5320/rpmbuild/BUILDROOT/ant-1.8.4-7.el6.x86_64
Wrote: /home/greg5320/rpmbuild/SRPMS/ant-1.8.4-7.el6.src.rpm
Wrote: /home/greg5320/rpmbuild/RPMS/noarch/ant-1.8.4-7.el6.noarch.rpm
Wrote: /home/greg5320/rpmbuild/RPMS/noarch/ant-jmf-1.8.4-7.el6.noarch.rpm
Wrote: /home/greg5320/rpmbuild/RPMS/noarch/ant-swing-1.8.4-7.el6.noarch.rpm
Wrote: /home/greg5320/rpmbuild/RPMS/noarch/ant-antlr-1.8.4-7.el6.noarch.rpm
Wrote:
/home/greg5320/rpmbuild/RPMS/noarch/ant-apache-bsf-1.8.4-7.el6.noarch.rpm
Wrote:
/home/greg5320/rpmbuild/RPMS/noarch/ant-apache-resolver-1.8.4-7.el6.noarch.rpm
Wrote:
/home/greg5320/rpmbuild/RPMS/noarch/ant-commons-logging-1.8.4-7.el6.noarch.rpm
Wrote:
/home/greg5320/rpmbuild/RPMS/noarch/ant-commons-net-1.8.4-7.el6.noarch.rpm
Wrote:
/home/greg5320/rpmbuild/RPMS/noarch/ant-apache-bcel-1.8.4-7.el6.noarch.rpm
Wrote:
/home/greg5320/rpmbuild/RPMS/noarch/ant-apache-log4j-1.8.4-7.el6.noarch.rpm
Wrote:
/home/greg5320/rpmbuild/RPMS/noarch/ant-apache-oro-1.8.4-7.el6.noarch.rpm
Wrote:
/home/greg5320/rpmbuild/RPMS/noarch/ant-apache-regexp-1.8.4-7.el6.noarch.rpm
Wrote:
/home/greg5320/rpmbuild/RPMS/noarch/ant-apache-xalan2-1.8.4-7.el6.noarch.rpm
Wrote: /home/greg5320/rpmbuild/RPMS/noarch/ant-javamail-1.8.4-7.el6.noarch.rpm
Wrote: /home/greg5320/rpmbuild/RPMS/noarch/ant-jdepend-1.8.4-7.el6.noarch.rpm
Wrote: /home/greg5320/rpmbuild/RPMS/noarch/ant-jsch-1.8.4-7.el6.noarch.rpm
Wrote: /home/greg5320/rpmbuild/RPMS/noarch/ant-junit-1.8.4-7.el6.noarch.rpm
Wrote: /home/greg5320/rpmbuild/RPMS/noarch/ant-testutil-1.8.4-7.el6.noarch.rpm
Wrote: /home/greg5320/rpmbuild/RPMS/noarch/ant-scripts-1.8.4-7.el6.noarch.rpm
Wrote: /home/greg5320/rpmbuild/RPMS/noarch/ant-manual-1.8.4-7.el6.noarch.rpm
Wrote: /home/greg5320/rpmbuild/RPMS/noarch/ant-javadoc-1.8.4-7.el6.noarch.rpm
Executing(%clean): /bin/sh -e /var/tmp/rpm-tmp.s26iaq
+ umask 022
+ cd /home/greg5320/rpmbuild/BUILD
+ cd apache-ant-1.8.4
+ /bin/rm -rf /home/greg5320/rpmbuild/BUILDROOT/ant-1.8.4-7.el6.x86_64
+ exit 0
Additional info:
patch to fix attached
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=Chd94bBkxD&a=cc_unsubscribe
10 years, 9 months
[Bug 798975] New: Please merge ant-scripts into the main package
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: Please merge ant-scripts into the main package
https://bugzilla.redhat.com/show_bug.cgi?id=798975
Summary: Please merge ant-scripts into the main package
Product: Fedora
Version: rawhide
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: unspecified
Priority: unspecified
Component: ant
AssignedTo: jcapik(a)redhat.com
ReportedBy: akurtako(a)redhat.com
QAContact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com, mmatejov(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jcapik(a)redhat.com
Classification: Fedora
Story Points: ---
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
By doing that we will have bash autocomplete enabled by default when someone
installs ant and one less subpackage to care about.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
10 years, 9 months