Attachment 1973890 Details for Bug 2219426 – File: description

File: description

description (text/plain), 2.22 KB, created by Ahmed Salama on 2023-07-03 15:27:34 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ahmed Salama

Created: 2023-07-03 15:27:34 UTC

Size: 2.22 KB

patch

obsolete

>SELinux is preventing snapd from 'write' accesses on the file core22.lock.
>
>*****  Plugin restorecon (99.5 confidence) suggests   ************************
>
>If you want to fix the label. 
>core22.lock default label should be snappy_var_run_t.
>Then you can run restorecon. The access attempt may have been stopped due to insufficient permissions to access a parent directory in which case try to change the following command accordingly.
>Do
># /sbin/restorecon -v core22.lock
>
>*****  Plugin catchall (1.49 confidence) suggests   **************************
>
>If you believe that snapd should be allowed write access on the core22.lock file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># ausearch -c 'snapd' --raw | audit2allow -M my-snapd
># semodule -X 300 -i my-snapd.pp
>
>Additional Information:
>Source Context                system_u:system_r:snappy_t:s0
>Target Context                system_u:object_r:var_run_t:s0
>Target Objects                core22.lock [ file ]
>Source                        snapd
>Source Path                   snapd
>Port                          <Unknown>
>Host                          (removed)
>Source RPM Packages           
>Target RPM Packages           
>SELinux Policy RPM            selinux-policy-targeted-38.17-1.fc38.noarch
>Local Policy RPM              snapd-selinux-2.58.3-1.fc38.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 6.3.8-200.fc38.x86_64 #1 SMP
>                              PREEMPT_DYNAMIC Thu Jun 15 02:15:40 UTC 2023
>                              x86_64
>Alert Count                   8
>First Seen                    2023-06-07 19:03:40 +04
>Last Seen                     2023-06-22 03:31:55 +04
>Local ID                      56f60104-0d9a-4add-8b31-1544e5b91652
>
>Raw Audit Messages
>type=AVC msg=audit(1687390315.387:733): avc:  denied  { write } for  pid=3962 comm="snapd" name="core22.lock" dev="tmpfs" ino=4272 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>
>
>Hash: snapd,snappy_t,var_run_t,file,write

Actions: View

Attachments on bug 2219426: 1973889 | 1973890