Bug 1328358

Summary:	Access denied while performing service related operation using systemctl
Product:	Red Hat Enterprise Linux 7	Reporter:	Abhijeet Kasurde <akasurde>
Component:	systemd	Assignee:	systemd-maint
Status:	CLOSED INSUFFICIENT_DATA	QA Contact:	qe-baseos-daemons
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.2	CC:	akasurde, huangyx3, jsynacek, msekleta, systemd-maint-list
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-06-06 13:19:09 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Abhijeet Kasurde 2016-04-19 08:09:30 UTC

Description of problem:
while restarting service, user gets access denied. Unable to find any specific reason.

# cat /etc/redhat-release 
Red Hat Enterprise Linux Server release 7.2 (Maipo)
# sestatus 
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   enforcing
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      28

# rpm -qa|grep systemd
systemd-libs-219-19.el7_2.7.x86_64
systemd-sysv-219-19.el7_2.7.x86_64
systemd-python-219-19.el7_2.7.x86_64
systemd-219-19.el7_2.7.x86_64

# systemctl status httpd
Failed to get properties: Access denied

# systemctl restart httpd
Failed to get properties: Access denied


Version-Release number of selected component (if applicable):
systemd-219-19.el7_2.7.x86_64

How reproducible:
100%

Steps to Reproduce:
mentioned as above

Actual results:
Access denied to all operations related to service using systemctl

Expected results:
All operations related to service should be successful.

Additional info:
Executing `systemctl daemon-reexec` resolves the issue.

Comment 2 Michal Sekletar 2016-04-20 08:26:15 UTC

Do you see any AVC deny message in audit.log?

Comment 3 Abhijeet Kasurde 2016-04-20 08:36:14 UTC

No. There are no AVC deny messages related to any service which I am working on.

Comment 4 Lukáš Nykrýn 2016-04-20 11:24:09 UTC

Could you send us the logs from that machine? If this is reproducible, can you boot with debug on kernel cmdline, reproduce the issue and send us output of journalctl -b?

Comment 5 Jan Synacek 2016-06-06 13:19:09 UTC

Closing for the lack of input.

Comment 7 huang yi xuan 2017-06-06 01:53:00 UTC

i found the same issue. 
]$ systemctl status irqbalance
Failed to get properties: Access denied

Comment 8 huang yi xuan 2017-06-06 01:53:55 UTC

~]$ cat /etc/redhat-release 
CentOS Linux release 7.3.1611 (Core)

not sure what kind of log you need?