Bug 1255623

Summary: AVC denied { execute } for comm="rhsmd" scontext=system_u:system_r:rhsmcertd_t tcontext=system_u:object_r:rhsmcertd_tmp_t
Product: Red Hat Enterprise Linux 7 Reporter: Jan Hutař <jhutar>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED DUPLICATE QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 7.2CC: lvrabec, mgrepl, mmalik, plautrba, pvrabec, ssekidde
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-08-21 08:41:24 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
AVC log none

Description Jan Hutař 2015-08-21 08:19:31 UTC 
Description of problem:
When I'm registering to RHSM, I get multiple AVCs. These doesn't seem to affect functionality though.
 

Version-Release number of selected component (if applicable):
RHEL-7.2-20150806.1 Server x86_64


How reproducible:
always


Steps to Reproduce:
1. Attempt to subscribe using RHSM


Actual results:
time->Thu Aug 20 19:50:06 2015
type=SYSCALL msg=audit(1440114606.473:185): arch=c000003e syscall=9 success=no exit=-13 a0=0 a1=1000 a2=5 a3=1 items=0 ppid=14761 pid=14762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rhsmd" exe="/usr/bin/python2.7" subj=system_u:system_r:rhsmcertd_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1440114606.473:185): avc:  denied  { execute } for  pid=14762 comm="rhsmd" path=2F746D702F66666930475841434E202864656C6574656429 dev="sda5" ino=19267600 scontext=system_u:system_r:rhsmcertd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rhsmcertd_tmp_t:s0 tclass=file
[...]


Expected results:
No AVCs
Comment 2 Jan Hutař 2015-08-21 08:22:01 UTC 
Created attachment 1065478 [details]
AVC log
Comment 4 Lukas Vrabec 2015-08-21 08:41:24 UTC 

*** This bug has been marked as a duplicate of bug 1243431 ***