Bug 1475869

Summary: avc: denied { search } for comm="osa-dispatcher" name="sss"
Product: [Community] Spacewalk Reporter: Pavel Studeník <pstudeni>
Component: ServerAssignee: Michael Mráka <mmraka>
Status: CLOSED EOL QA Contact: Red Hat Satellite QA List <satqe-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 2.6   
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-10-21 13:26:18 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Pavel Studeník 2017-07-27 13:51:31 UTC
Description of problem:
During installation of Spacewalk on Fedora 26 I can see avc messages in audit logs:

time->Wed Jul 26 19:52:08 2017
type=AVC msg=audit(1501113128.987:460): avc:  denied  { search } for  pid=25917 comm="osa-dispatcher" name="sss" dev="dm-0" ino=12658935 scontext=system_u:system_r:osa_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=dir permissive=0
----
time->Wed Jul 26 19:52:08 2017
type=AVC msg=audit(1501113128.987:461): avc:  denied  { search } for  pid=25917 comm="osa-dispatcher" name="sss" dev="dm-0" ino=12658935 scontext=system_u:system_r:osa_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=dir permissive=0

Version-Release number of selected component (if applicable):
selinux-policy-3.13.1-260.1.fc26.noarch
spacewalk-selinux-2.7.2-1.fc26.noarch

Comment 1 Michael Mráka 2019-10-21 13:26:18 UTC
Spacewalk 2.8 (and older) has already reached it's End Of Life.

Thank you for reporting this issue and we are sorry that we were not
able to fix it before end of life. If you would still like
to see this bug fixed and are able to reproduce it against current version
of Spacewalk 2.9, you are encouraged change the 'version' and re-open it.