Bug 1400016

Summary: AVC starting systemd-networkd
Product: [Fedora] Fedora Reporter: Tom Hughes <tom>
Component: selinux-policy-targetedAssignee: Lukas Vrabec <lvrabec>
Status: CLOSED ERRATA QA Contact: Ben Levenson <benl>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 25CC: dwalsh
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-12-08 18:22:32 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Tom Hughes 2016-11-30 09:55:40 UTC
Description of problem:

I'm getting this AVC when systemd-networkd starts:

type=AVC msg=audit(1480498763.134:104): avc:  denied  { read } for  pid=561 comm="systemd-network" name="unix" dev="proc" ino=4026532021 scontext=system_u:system_r:systemd_networkd_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1

File being access appears to be /proc/*/net/unix.

Version-Release number of selected component (if applicable):

selinux-policy-targeted-3.13.1-224.fc25.noarch

Comment 1 Fedora Update System 2016-12-05 17:01:58 UTC
selinux-policy-3.13.1-225.1.fc25 has been submitted as an update to Fedora 25. https://bodhi.fedoraproject.org/updates/FEDORA-2016-e3864b8972

Comment 2 Fedora Update System 2016-12-07 02:25:25 UTC
selinux-policy-3.13.1-225.1.fc25 has been pushed to the Fedora 25 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-e3864b8972

Comment 3 Fedora Update System 2016-12-08 18:22:32 UTC
selinux-policy-3.13.1-225.1.fc25 has been pushed to the Fedora 25 stable repository. If problems still persist, please make note of it in this bug report.