Bug 1182640
Summary: | SELinux is preventing /usr/lib/systemd/systemd-journald from 'getattr' accesses on the netlink_audit_socket netlink_audit_socket. | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Petr Schindler <pschindl> |
Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
Status: | CLOSED CURRENTRELEASE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | rawhide | CC: | awilliam, decathorpe, dominick.grift, dwalsh, jfrieben, khadgaray, lvrabec, mgrepl, mruckman, plautrba, robatino |
Target Milestone: | --- | Keywords: | Reopened |
Target Release: | --- | ||
Hardware: | x86_64 | ||
OS: | Unspecified | ||
Whiteboard: | abrt_hash:332add6ba984161348e9cbe6dfe4abb62a3b089205330e3f8d1d27c4416108cd | ||
Fixed In Version: | selinux-policy-3.13.1-111.fc22 | Doc Type: | Bug Fix |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2015-02-12 21:33:09 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 1043130 |
Description
Petr Schindler
2015-01-15 15:51:19 UTC
Description of problem: Happens on boot of a Rawhide Workstation live image with selinux-policy-3.13.1-107.fc22. Version-Release number of selected component: selinux-policy-3.13.1-107.fc22.noarch Additional info: reporter: libreport-2.3.0 hashmarkername: setroubleshoot kernel: 3.19.0-0.rc7.git0.1.fc22.x86_64 type: libreport Proposing as a Final blocker: "There must be no SELinux denial notifications or crash notifications on boot of or during installation from a release-blocking live image, or at first login after a default install of a release-blocking desktop." - https://fedoraproject.org/wiki/Fedora_22_Final_Release_Criteria#SELinux_and_crash_notifications . I don't see this any more with the recent selinux-policy-3.13.1-110.fc22.noarch build. yeah, I didn't either. Call it closed. Description of problem: This SELinux warning is appearing every few minutes during usual session. Version-Release number of selected component: selinux-policy-3.13.1-110.fc22.noarch Additional info: reporter: libreport-2.3.0 hashmarkername: setroubleshoot kernel: 3.19.0-1.fc22.x86_64 type: libreport commit fd1640754378a34b38f529d3c37f599170e17957 Author: Dan Walsh <dwalsh> Date: Sat Feb 7 18:44:46 2015 +0100 Allow syslogd/journal to read netlink audit socket Patch included in this build. http://koji.fedoraproject.org/koji/buildinfo?buildID=610267 |