Bug 1482149

Summary: Selinux is preventing 'map' access to /usr/share/cockpit/static/login.po.html
Product: [Fedora] Fedora Reporter: Paul Whalen <pwhalen>
Component: selinux-policyAssignee: Lukas Vrabec <lvrabec>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: dominick.grift, dwalsh, lsm5, lvrabec, mgrepl, plautrba, pmoore, ssekidde
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: selinux-policy-3.13.1-276.fc27 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-01-15 19:19:29 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1481454    

Description Paul Whalen 2017-08-16 14:55:18 UTC
Description of problem:
Boot server install, attempt to login to cockpit

----
time->Wed Aug 16 10:48:01 2017
type=AVC msg=audit(1502894881.862:230): avc:  denied  { map } for  pid=979 comm="cockpit-ws" path="/usr/share/cockpit/static/login.po.html" dev="dm-0" ino=25687120 scontext=system_u:system_r:cockpit_ws_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0
----

Version-Release number of selected component (if applicable):
selinux-policy-3.13.1-272.fc27.noarch

Comment 1 Lukas Vrabec 2017-08-17 15:00:15 UTC
*** Bug 1482153 has been marked as a duplicate of this bug. ***

Comment 2 Paul Whalen 2018-01-15 19:19:29 UTC
This was fixed in f27.