Bug 1410066
| Summary: | SELinux: Many AVC denials for TLP | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | David Kaspar // Dee'Kej <deekej> | ||||||||
| Component: | selinux-policy | Assignee: | Lukas Vrabec <lvrabec> | ||||||||
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||||
| Severity: | medium | Docs Contact: | |||||||||
| Priority: | medium | ||||||||||
| Version: | 25 | CC: | bertranjlopez, dominick.grift, dwalsh, linrunner, lvrabec, mgrepl, plautrba, pmoore, ssekidde | ||||||||
| Target Milestone: | --- | ||||||||||
| Target Release: | --- | ||||||||||
| Hardware: | x86_64 | ||||||||||
| OS: | Linux | ||||||||||
| URL: | http://linrunner.de/en/tlp/tlp.html | ||||||||||
| Whiteboard: | |||||||||||
| Fixed In Version: | selinux-policy-3.13.1-225.16.fc25 | Doc Type: | If docs needed, set a value | ||||||||
| Doc Text: | Story Points: | --- | |||||||||
| Clone Of: | Environment: | ||||||||||
| Last Closed: | 2017-05-19 23:02:44 UTC | Type: | Bug | ||||||||
| Regression: | --- | Mount Type: | --- | ||||||||
| Documentation: | --- | CRM: | |||||||||
| Verified Versions: | Category: | --- | |||||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||||
| Embargoed: | |||||||||||
| Attachments: |
|
||||||||||
Created attachment 1237097 [details]
My /etc/default/tlp configuration file.
This is default configuration of TLP, updated with some of my requirements. The configuration should be self-explanatory.
This also affects me on a ThinkPad T430s running Fedora 25 Created attachment 1277670 [details]
Additional policy modules needed by tlp
These are the additional policy te files I needed to install to get tlp working on my system.
selinux-policy-3.13.1-225.16.fc25 has been submitted as an update to Fedora 25. https://bodhi.fedoraproject.org/updates/FEDORA-2017-9a20533d62 selinux-policy-3.13.1-225.16.fc25 has been pushed to the Fedora 25 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-9a20533d62 selinux-policy-3.13.1-225.16.fc25 has been pushed to the Fedora 25 stable repository. If problems still persist, please make note of it in this bug report. |
Created attachment 1237096 [details] AVC denials related to TLP Description of problem: Changing configuration to TLP (a way to manage how laptop behaves in different situations, like e.g. unplugging from A/C, when to turn on WiFi automatically, etc.) causes many AVC denials after reboot, thus blocking the correct functionality of TLP. Version-Release number of selected component (if applicable): selinux-policy-3.13.1-225.3.fc25.noarch How reproducible: Always. Steps to Reproduce: 1. Install the tlp packages (with its requirements): $ sudo dnf install tlp tlp-rdw 2. Use the configuration for TLP provided in next comment. It replaces the /etc/default/tlp file. 3. TLP should be automatically enabled by default now, only reboot is needed. 4. See the AVC denials in SELinux troubleshooter. Actual results: TLP is denied some of its core functionality. Additional info: I had to manually allowed the processes for now. Expected results: TLP runs as it should.