Bug 119644

Summary: tmpwatch can not stat initrd's tmp files.
Product: [Fedora] Fedora Reporter: Aleksey Nogin <aleksey>
Component: policyAssignee: Daniel Walsh <dwalsh>
Status: CLOSED RAWHIDE QA Contact: Ben Levenson <benl>
Severity: medium Docs Contact:
Priority: medium    
Version: rawhideCC: pgraner
Target Milestone: ---Keywords: SELinux
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2004-05-10 15:06:59 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 122683    

Description Aleksey Nogin 2004-04-01 00:31:39 UTC
/etc/cron.daily/tmpwatch:

error: failed to lstat /tmp/initrd.Fs6335/dev/console: Permission denied
error: failed to lstat /tmp/initrd.Fs6335/dev/null: Permission denied
error: failed to lstat /tmp/initrd.Fs6335/dev/ram: Permission denied
error: failed to lstat /tmp/initrd.Fs6335/dev/systty: Permission denied
error: failed to lstat /tmp/initrd.Fs6335/dev/tty1: Permission denied
error: failed to lstat /tmp/initrd.Fs6335/dev/tty2: Permission denied
error: failed to lstat /tmp/initrd.Fs6335/dev/tty3: Permission denied
error: failed to lstat /tmp/initrd.Fs6335/dev/tty4: Permission denied

Mar 31 04:02:42 dell kernel: audit(1080734562.496:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/console dev=hda2 ino=509069
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=chr_file
Mar 31 04:02:42 dell kernel: audit(1080734562.497:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/null dev=hda2 ino=509070
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=chr_file
Mar 31 04:02:42 dell kernel: audit(1080734562.497:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/ram dev=hda2 ino=509071
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=blk_file
Mar 31 04:02:42 dell kernel: audit(1080734562.498:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/systty dev=hda2 ino=509072
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=chr_file
Mar 31 04:02:42 dell kernel: audit(1080734562.498:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/tty1 dev=hda2 ino=509073
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=chr_file
Mar 31 04:02:42 dell kernel: audit(1080734562.498:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/tty2 dev=hda2 ino=509074
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=chr_file
Mar 31 04:02:42 dell kernel: audit(1080734562.498:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/tty3 dev=hda2 ino=509075
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=chr_file
Mar 31 04:02:42 dell kernel: audit(1080734562.498:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/tty4 dev=hda2 ino=509076
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=chr_file

tmpwatch-2.9.0-2.1 policy-sources-1.9.1-2

Comment 1 Daniel Walsh 2004-04-01 18:17:00 UTC
policy-sources-1.9.2-2