Bug 1016057
Summary: | there will be AVC denial in audit.log when jenkins build is finished | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 6 | Reporter: | Brenton Leanhardt <bleanhar> |
Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
Status: | CLOSED CURRENTRELEASE | QA Contact: | Milos Malik <mmalik> |
Severity: | medium | Docs Contact: | |
Priority: | low | ||
Version: | 6.5 | CC: | dwalsh, gpei, libra-onpremise-devel, mgrepl, mmalik |
Target Milestone: | rc | ||
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | 980353 | Environment: | |
Last Closed: | 2013-10-30 09:52:31 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 980353 |
Description
Brenton Leanhardt
2013-10-07 12:19:04 UTC
If you add require { type mtrr_device_t; type openshift_t; class file getattr; } #============= openshift_t ============== dontaudit openshift_t mtrr_device_t:file getattr; does it work? Tried to add require { type mtrr_device_t; type openshift_t; class file getattr; } #============= openshift_t ============== allow openshift_t mtrr_device_t:file getattr; It works during the jenkins build and require { type mtrr_device_t; type openshift_t; class file getattr; } #============= openshift_t ============== dontaudit openshift_t mtrr_device_t:file getattr; also works, it wouldn't generate any AVC denial during the operation. Probably should just add a dontaudit. More fixes have been added during RHEL6.5 cycle related to openshift and this bug should be fixed. If no, please re-open the bug and it will be addressed in RHEL6.6. |