Bug 1458860

Summary: gssproxy generates nonfatal selinux messages
Product: [Fedora] Fedora Reporter: Robbie Harwood <rharwood>
Component: gssproxyAssignee: Robbie Harwood <rharwood>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: low    
Version: 27CC: gdeschner, ipa-qe, nsoman, rharwood, ssorce
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: gssproxy-0.7.0-21.fc27 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1458850 Environment:
Last Closed: 2017-11-11 02:47:50 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1458850    
Bug Blocks:    

Description Robbie Harwood 2017-06-05 16:44:20 UTC 
+++ This bug was initially created as a clone of Bug #1458850 +++

Running: /usr/sbin/ausearch  -sv no -m AVC -ts  05/31/2017 23:57:19 
 SELinux Check: FAIL
 SELinux AVC messages found:
 ----
 time->Wed May 31 23:57:42 2017
 type=SYSCALL msg=audit(1496289462.631:297706): arch=c000003e syscall=137 success=no exit=-13 a0=7f1c6b6766c0 a1=7ffc39592a90 a2=fffffffffff47428 a3=7ffc395928c0 items=0 ppid=1 pid=10308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="gssproxy" exe="/usr/sbin/gssproxy" subj=system_u:system_r:gssproxy_t:s0 key=(null)
 type=AVC msg=audit(1496289462.631:297706): avc:  denied  { getattr } for  pid=10308 comm="gssproxy" name="/" dev="vda2" ino=2 scontext=system_u:system_r:gssproxy_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
 ----
 time->Wed May 31 23:57:42 2017
 type=SYSCALL msg=audit(1496289462.840:297712): arch=c000003e syscall=137 success=no exit=-13 a0=7f17579576c0 a1=7ffd78399c40 a2=fffffffffff47428 a3=7ffd78399a70 items=0 ppid=1 pid=10340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="gssproxy" exe="/usr/sbin/gssproxy" subj=system_u:system_r:gssproxy_t:s0 key=(null)
 type=AVC msg=audit(1496289462.840:297712): avc:  denied  { getattr } for  pid=10340 comm="gssproxy" name="/" dev="vda2" ino=2 scontext=system_u:system_r:gssproxy_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
 ----
 time->Wed May 31 23:58:05 2017
 type=SYSCALL msg=audit(1496289485.517:297738): arch=c000003e syscall=137 success=no exit=-13 a0=7f2209f2b6c0 a1=7ffd11b3be80 a2=fffffffffff47428 a3=7ffd11b3bcb0 items=0 ppid=1 pid=10659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="gssproxy" exe="/usr/sbin/gssproxy" subj=system_u:system_r:gssproxy_t:s0 key=(null)
 type=AVC msg=audit(1496289485.517:297738): avc:  denied  { getattr } for  pid=10659 comm="gssproxy" name="/" dev="vda2" ino=2 scontext=system_u:system_r:gssproxy_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem

--- Additional comment from Robbie Harwood on 2017-06-05 12:42:33 EDT ---

We haven't looked into why this happens, but it doesn't break anything we've seen so far.  Thanks for the report.
Comment 1 Jan Kurik 2017-08-15 07:30:44 UTC 
This bug appears to have been reported against 'rawhide' during the Fedora 27 development cycle.
Changing version to '27'.
Comment 2 Fedora Update System 2017-09-29 20:05:22 UTC 
gssproxy-0.7.0-19.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-c48f3d65b0
Comment 3 Fedora Update System 2017-10-02 00:56:19 UTC 
gssproxy-0.7.0-19.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-c48f3d65b0
Comment 4 Fedora Update System 2017-10-02 18:24:18 UTC 
gssproxy-0.7.0-21.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-11e3b0a6c1
Comment 5 Fedora Update System 2017-10-06 04:24:41 UTC 
gssproxy-0.7.0-21.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-11e3b0a6c1
Comment 6 Fedora Update System 2017-11-11 02:47:50 UTC 
gssproxy-0.7.0-21.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report.