Bug 1002059

Summary: selinux avc: denied messages in syslog after booting Fedora-20-Alpha-TC1-x86_64-DVD.iso
Product: [Fedora] Fedora Reporter: Steve Tyler <stephent98>
Component: loraxAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: anaconda-maint-list, bcl, dominick.grift, dwalsh, lvrabec, mgrepl, stephent98
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-05-27 17:13:47 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
grep-avc-syslog-1.txt
none
syslog none

Description Steve Tyler 2013-08-28 12:17:47 UTC 
Created attachment 791368 [details]
grep-avc-syslog-1.txt

Description of problem:
The attachment has all the avcs in /tmp/syslog after booting the F20 Alpha TC1 DVD to the installer Welcome dialog.

NB: I reported some of these separately:
Bug 1002006
Bug 1002035
Bug 1002038

Bug 1001425, Attachment 791262 [details] has other avcs that are not in the attachment.

Version-Release number of selected component (if applicable):
Fedora-20-Alpha-TC1-x86_64-DVD.iso

How reproducible:
Always.

Steps to Reproduce:
1. Start installer from DVD:
$ qemu-kvm -m 4096 -hda f20-test-3.img -cdrom ~/xfr/fedora/F20/Alpha/Fedora-20-Alpha-TC1-x86_64-DVD.iso -vga std -boot menu=on

2. Boot to Welcome dialog.
3. Switch to installer console (ctrl-alt-f2).
4. # grep avc /tmp/syslog > grep-avc-syslog-1.txt

Actual results:
avcs

Expected results:
no avcs

Additional info:
Comment 1 Steve Tyler 2013-08-28 19:47:20 UTC 
Created attachment 791522 [details]
syslog
Comment 2 Daniel Walsh 2013-08-28 20:22:39 UTC 
The image seems to be mislabeled.  This bug belongs to the tool used to build them.
Comment 3 Steve Tyler 2013-08-28 22:09:15 UTC 
The tool would probably be lorax. The problem of spurious avcs during installs has been noted before:
Bug 804306 - SELinux avc complaints during install 

Changing component to lorax.
Comment 4 Steve Tyler 2013-08-29 06:33:27 UTC 
*** Bug 1002035 has been marked as a duplicate of this bug. ***
Comment 5 Daniel Walsh 2013-08-29 12:42:35 UTC 
The last step after building an image should be to run a setfiles to put the proper labels on this image.  This is what livecd did.
Comment 6 Brian Lane 2015-05-27 17:13:47 UTC 
No recent reports of this problem, closing.