Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://rhn.redhat.com/errata/RHBA-2016-2283.html
Created attachment 1090186 [details] /var/log/audit/audit.log Description of problem: Got 17 "avc denied" messages on starting up openvswitch service type=AVC msg=audit(1446735509.031:30): avc: denied { read } for pid=1900 comm="ovs-vswitchd" name="/" dev="hugetlbfs" ino=12482 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=dir type=AVC msg=audit(1446735509.031:30): avc: denied { open } for pid=1900 comm="ovs-vswitchd" path="/dev/hugepages" dev="hugetlbfs" ino=12482 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=dir type=AVC msg=audit(1446735509.031:31): avc: denied { lock } for pid=1900 comm="ovs-vswitchd" path="/dev/hugepages" dev="hugetlbfs" ino=12482 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=dir type=AVC msg=audit(1446735509.064:32): avc: denied { write } for pid=1900 comm="ovs-vswitchd" name="/" dev="hugetlbfs" ino=12482 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=dir See attached audit.log for more. Version-Release number of selected component (if applicable): RHEL 7.2 Beta Snapshot #5 openvswitch-dpdk-2.4.0-0.10346.git97bab959.1.el7.x86_64 dpdk-2.1.0-3.el7.x86_64 How reproducible: Reproducible Steps to Reproduce: 1. Set up OVS+DPDK test-bed 2. setenforce 0 3. systemctl start openvswitch 4. Check /var/log/audit/audit.log Actual results: Expected results: Additional info: