Bug 1279429
| Summary: | cockpit-ws should be able to write to /run/cockpit-ws | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Stef Walter <stefw> |
| Component: | selinux-policy | Assignee: | Lukas Vrabec <lvrabec> |
| Status: | CLOSED ERRATA | QA Contact: | Milos Malik <mmalik> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 7.2 | CC: | lvrabec, mgrepl, mmalik, plautrba, pvrabec, ssekidde, stefw |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | selinux-policy-3.13.1-66.el7 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-11-04 02:24:27 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Fedora 23 bug here: https://bugzilla.redhat.com/show_bug.cgi?id=1279430 Which version of cockpit did you use? And what action triggered the AVC? This is an indevelopment version of cockpit. We would like the next version to be able to write to /run/cockpit-ws Currently Cockpit on RHEL fails due to cockpit-ws trying to write to /tmp. We would like to consolidate the runtime files in /run/cockpit-ws instead: https://github.com/cockpit-project/cockpit/pull/3134 We would back port all Fedora changes to RHEL-7.3. This bug was accidentally moved from POST to MODIFIED via an error in automation, please see mmccune with any questions Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-2283.html |
Description of problem: Nov 09 07:53:45 localhost.localdomain kernel: type=1400 audit(1447073625.699:4): avc: denied { write } for pid=2280 comm="ssh-transport-c" name="cockpit-ws" dev="tmpfs" ino=19561 scontext=system_u:system_r:cockpit_ws_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir cockpit-ws should be able to write to a /run/cockpit-ws directory. Version-Release number of selected component (if applicable): selinux-policy-targeted-3.13.1-60.el7.noarch