Attachment 604594 Details for Bug 848371 – File: description

File: description

description (text/plain), 1.98 KB, created by Elad Alfassa on 2012-08-15 12:34:04 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Elad Alfassa

Created: 2012-08-15 12:34:04 UTC

Size: 1.98 KB

patch

obsolete

>SELinux is preventing systemd-journal from 'getattr' accesses on the directory /sys/fs/cgroup.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If you believe that systemd-journal should be allowed getattr access on the cgroup directory by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep systemd-journal /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:syslogd_t:s0
>Target Context                system_u:object_r:cgroup_t:s0
>Target Objects                /sys/fs/cgroup [ dir ]
>Source                        systemd-journal
>Source Path                   systemd-journal
>Port                          <Unknown>
>Host                          (removed)
>Source RPM Packages           
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.11.1-6.fc18.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.6.0-0.rc1.git6.1.fc18.x86_64 #1
>                              SMP Tue Aug 14 12:13:12 UTC 2012 x86_64 x86_64
>Alert Count                   89
>First Seen                    2012-08-15 11:05:19 IDT
>Last Seen                     2012-08-15 15:33:04 IDT
>Local ID                      310c0237-5266-4bd9-ad23-cd381ecc0f78
>
>Raw Audit Messages
>type=AVC msg=audit(1345033984.19:138): avc:  denied  { getattr } for  pid=337 comm="systemd-journal" path="/sys/fs/cgroup" dev="tmpfs" ino=7200 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir
>
>
>Hash: systemd-journal,syslogd_t,cgroup_t,dir,getattr
>
>audit2allow
>
>#============= syslogd_t ==============
>allow syslogd_t cgroup_t:dir getattr;
>
>audit2allow -R
>
>#============= syslogd_t ==============
>allow syslogd_t cgroup_t:dir getattr;
>

Actions: View

Attachments on bug 848371: 604592 | 604593 | 604594