Bug 1043463

Summary: avc running pacemaker tests
Product: Red Hat Enterprise Linux 7 Reporter: michal novacek <mnovacek>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED CURRENTRELEASE QA Contact: Milos Malik <mmalik>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.0CC: mmalik
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-06-13 11:11:41 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description michal novacek 2013-12-16 11:42:24 UTC
/sbin/ausearch -m AVC -m USER_AVC -m SELINUX_ERR

time->Mon Dec 16 11:57:49 2013
type=USER_AVC msg=audit(1387191469.816:3878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=5)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
----
time->Mon Dec 16 12:05:09 2013
type=SYSCALL msg=audit(1387191909.250:4644): arch=c000003e syscall=87 success=yes exit=0 a0=7f504103000c a1=7fff789176c0 a2=0 a3=7fff789177f0 items=0 ppid=1 pid=11600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dlm_controld" exe="/usr/sbin/dlm_controld" subj=system_u:system_r:dlm_controld_t:s0 key=(null)
type=AVC msg=audit(1387191909.250:4644): avc:  denied  { unlink } for  pid=11600 comm="dlm_controld" name="qb-cpg-request-11459-11600-31-data" dev="tmpfs" ino=118817 scontext=system_u:system_r:dlm_controld_t:s0 tcontext=system_u:object_r:cluster_tmpfs_t:s0 tclass=file
----
time->Mon Dec 16 12:19:19 2013
type=SYSCALL msg=audit(1387192759.296:5271): arch=c000003e syscall=87 success=yes exit=0 a0=7f6ed5b6200c a1=7ffff86e5430 a2=0 a3=7ffff86e5560 items=0 ppid=1 pid=13068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dlm_controld" exe="/usr/sbin/dlm_controld" subj=system_u:system_r:dlm_controld_t:s0 key=(null)
type=AVC msg=audit(1387192759.296:5271): avc:  denied  { unlink } for  pid=13068 comm="dlm_controld" name="qb-cpg-request-12953-13068-31-data" dev="tmpfs" ino=138025 scontext=system_u:system_r:dlm_controld_t:s0 tcontext=system_u:object_r:cluster_tmpfs_t:s0 tclass=file

Version-Release number of selected component (if applicable):
selinux-policy-3.12.1-109.el7.noarch

Comment 2 Miroslav Grepl 2014-01-13 16:10:56 UTC
commit 5ba686e3c5bb4cc0dbb9578b30e0aa88777fca3b
Author: Miroslav Grepl <mgrepl>
Date:   Mon Jan 13 17:10:21 2014 +0100

    Call rhcs_rw_cluster_tmpfs for dlm_controld

Comment 5 Ludek Smid 2014-06-13 11:11:41 UTC
This request was resolved in Red Hat Enterprise Linux 7.0.

Contact your manager or support representative in case you have further questions about the request.