Bug 1358730
| Summary: | SELinux is preventing mpd from 'getattr' accesses on the directory /root/.config. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | arturpolak1 |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 24 | CC: | dominick.grift, dwalsh, lvrabec, mgrepl, plautrba |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:e2a29d135cba069180fd364a8190410cf78a7c37b1d9e70594776c6c5e05cf64;VARIANT_ID=workstation; | ||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-08-15 16:01:12 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
*** This bug has been marked as a duplicate of bug 1325502 *** |
Description of problem: I'm trying to launch mpd via systemctl, but it fails with result of exit code. SELinux is preventing mpd from 'getattr' accesses on the directory /root/.config. ***** Plugin catchall (100. confidence) suggests ************************** If aby mpd powinno mieć domyślnie getattr dostęp do .config directory. Then proszę to zgłosić jako błąd. Można utworzyć lokalny moduł polityki, aby umożliwić ten dostęp. Do allow this access for now by executing: # ausearch -c 'mpd' --raw | audit2allow -M my-mpd # semodule -X 300 -i my-mpd.pp Additional Information: Source Context system_u:system_r:mpd_t:s0 Target Context unconfined_u:object_r:config_home_t:s0 Target Objects /root/.config [ dir ] Source mpd Source Path mpd Port <Unknown> Host (removed) Source RPM Packages Target RPM Packages Policy RPM selinux-policy-3.13.1-191.5.fc24.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 4.6.3-300.fc24.x86_64 #1 SMP Fri Jun 24 20:52:41 UTC 2016 x86_64 x86_64 Alert Count 1 First Seen 2016-07-21 13:41:24 CEST Last Seen 2016-07-21 13:41:24 CEST Local ID 62644447-ea1b-4e9e-a3c9-bc8de345755f Raw Audit Messages type=AVC msg=audit(1469101284.719:259): avc: denied { getattr } for pid=23566 comm="mpd" path="/root/.config" dev="dm-0" ino=393234 scontext=system_u:system_r:mpd_t:s0 tcontext=unconfined_u:object_r:config_home_t:s0 tclass=dir permissive=0 Hash: mpd,mpd_t,config_home_t,dir,getattr Version-Release number of selected component: selinux-policy-3.13.1-191.5.fc24.noarch Additional info: reporter: libreport-2.7.1 hashmarkername: setroubleshoot kernel: 4.6.3-300.fc24.x86_64 reproducible: Not sure how to reproduce the problem type: libreport Potential duplicate: bug 1325502