| Summary: | SELinux is preventing google-chrome-s from 'create' accesses on the file 63. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Anthony Messina <amessina> |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 24 | CC: | alessandromachado.vip, anickajur373, as.kmr.sinh+redhat, bakmenson, bbaetz, bignikita, bugzilla, busolinalessandro, cruz, davidparracatalan, debabrata.deb, dominick.grift, dwalsh, edwardp, extras-qa, fabrizio.carmine, fredaoviana, geigor, geslinux, hflthree, imspidermannomore, joepeeer, keramidasceid, kj4ohh, leonardoggavellar, lvrabec, mgrepl, padrebrunoalmeida, peljasz, plautrba, rafaelrodrix, rajabi_mohamad, samuelmarqueslima1, sohailgerman, steve, steve, temlakos, wagner.pvilla, wayne.roberts386, wolfgang.rupprecht, xzj8b3 |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | abrt_hash:a860b9cf7ea49b9731e3a1b82486cdf380f6504f5d5c45de1b439e85e6cf29ea;VARIANT_ID=workstation; | ||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1345836 | Environment: | |
| Last Closed: | 2016-09-08 19:17:53 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Description
Anthony Messina
2016-08-25 10:24:55 UTC
Description of problem: 1. Updated kernel from 4.6 to 4.7.2-201.fc24.x86_64 2. Reboot system 3. Started google-chrome 53.0.2785.89 (64-bit) Version-Release number of selected component: selinux-policy-3.13.1-191.14.fc24.noarch Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport Description of problem: This problem occurred after I: (a) Upgraded to the now-current version of the kernel (4.7.2-201.fc24.x86_64), (b) Shut down and restarted the machine, and finally (c) Started Google Chrome. Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport Please see https://bugzilla.redhat.com/show_bug.cgi?id=1345836 This bug was "fixed in selinux-policy-3.13.1-196.fc25.noarch" Hopefully, it will be backported into Fedora 24. (In reply to SteveCr48 from comment #3) > Please see https://bugzilla.redhat.com/show_bug.cgi?id=1345836 > > This bug was "fixed in selinux-policy-3.13.1-196.fc25.noarch" Hopefully, it > will be backported into Fedora 24. Thank you. Description of problem: Was trying to start Google Chrome (google-chrome-stable-53.0.2785.92-1.x86_64) from the 'Applications' menu. Version-Release number of selected component: selinux-policy-3.13.1-191.14.fc24.noarch Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport Description of problem: Launched google-chrome-stable, prompts for password to unlock keyring. Version-Release number of selected component: selinux-policy-3.13.1-191.14.fc24.noarch Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport Description of problem: Starting up google-chrome-stable appears to have caused this. Version-Release number of selected component: selinux-policy-3.13.1-191.14.fc24.noarch Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport Description of problem: Initial startup of computrer; After Logging in, start Chrome and receive SELinux alert about denied access. I can't tell if the denial causes any problems. I haven't noticed any. Version-Release number of selected component: selinux-policy-3.13.1-191.14.fc24.noarch Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport Could this possibly be related to the 4.7.2 kernel? I just booted up using the previously-installed kernel (4.6.7, I believe), launched Chrome and it started fine. The box about the keyring not unlocking, did not appear. Description of problem: SELinux Violation everytime I start Chrome now. Version-Release number of selected component: selinux-policy-3.13.1-191.14.fc24.noarch Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport *** Bug 1373284 has been marked as a duplicate of this bug. *** Description of problem: Latest update (Google Chrome 53.0.2785.92) after installing and rebooting made this warning appear. Don't know the possible causes nor the consequences of this warning Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport There is a new check in the latest kernel which is causing this issue. Basically the "create" check is happening even if the file already exists. This is causing the SELinux issue, since creating files in /proc is not allowed, we don't allow it in policy. Nothing is actually blocked by this AVC since the file does not actually need to be created. We have added a dontaudit rule for this in Rawhide, and we need to back port this to older versions of Fedora. Description of problem: Launching Google, this error message appeared. Version-Release number of selected component: selinux-policy-3.13.1-191.14.fc24.noarch Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport *** Bug 1373861 has been marked as a duplicate of this bug. *** Description of problem: Installed latest google chrome and received a selinux warning Version-Release number of selected component: selinux-policy-3.13.1-191.14.fc24.noarch Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport Description of problem: When I open up Chrome I am asked to enter passwords. It will not allow me to enter passwords, the black box where the passwords are entered just hang Version-Release number of selected component: selinux-policy-3.13.1-191.14.fc24.noarch Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport Description of problem: Just started and launch Google Chrome Version-Release number of selected component: selinux-policy-3.13.1-191.14.fc24.noarch Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport Description of problem: Open Chrome 53.0.2785.92 (64-bit) Version-Release number of selected component: selinux-policy-3.13.1-191.14.fc24.noarch Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport Description of problem: Start Chrome Happened after updating to Version 53.0.2785.92 (64-bit) Version-Release number of selected component: selinux-policy-3.13.1-191.14.fc24.noarch Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport *** This bug has been marked as a duplicate of bug 1345836 *** *** Bug 1374930 has been marked as a duplicate of this bug. *** *** Bug 1374952 has been marked as a duplicate of this bug. *** *** Bug 1375019 has been marked as a duplicate of this bug. *** *** Bug 1376612 has been marked as a duplicate of this bug. *** *** Bug 1377979 has been marked as a duplicate of this bug. *** *** Bug 1378377 has been marked as a duplicate of this bug. *** |