Skip to content

selinux denials for Fedora #98

@tasleson

Description

@tasleson

Getting the following denials on F38 when running libStorageMgmt test suite.

Dec 07 16:43:22 targetd audit[677]: USER_MAC_STATUS pid=677 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  op=setenforce lsm=selinux enforcing=0 res=1 exe="/usr/bin/dbus-broker" sauid=81 hostname=? addr=? terminal=?'
Dec 07 16:43:23 targetd audit[754]: AVC avc:  denied  { write } for  pid=754 comm="targetd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:targetd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
Dec 07 16:43:23 targetd audit[754]: AVC avc:  denied  { add_name } for  pid=754 comm="targetd" name="rtslib_backstore.lock" scontext=system_u:system_r:targetd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
Dec 07 16:43:23 targetd audit[754]: AVC avc:  denied  { create } for  pid=754 comm="targetd" name="rtslib_backstore.lock" scontext=system_u:system_r:targetd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
Dec 07 16:43:23 targetd audit[754]: AVC avc:  denied  { read write open } for  pid=754 comm="targetd" path="/run/rtslib_backstore.lock" dev="tmpfs" ino=2620 scontext=system_u:system_r:targetd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
Dec 07 16:43:23 targetd audit[754]: AVC avc:  denied  { getattr } for  pid=754 comm="targetd" path="/run/rtslib_backstore.lock" dev="tmpfs" ino=2620 scontext=system_u:system_r:targetd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
Dec 07 16:43:23 targetd audit[754]: AVC avc:  denied  { ioctl } for  pid=754 comm="targetd" path="/run/rtslib_backstore.lock" dev="tmpfs" ino=2620 ioctlcmd=0x5401 scontext=system_u:system_r:targetd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
Dec 07 16:43:23 targetd audit[754]: AVC avc:  denied  { lock } for  pid=754 comm="targetd" path="/run/rtslib_backstore.lock" dev="tmpfs" ino=2620 scontext=system_u:system_r:targetd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions