Bug 1574368
Summary: | SELinux is preventing snapd from 'read' accesses on the directory snap. | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Giacomo F.M. <elmejodegiacomo> |
Component: | snapd | Assignee: | Zygmunt Krynicki <me> |
Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | 28 | CC: | alexander.janssen, dwalsh, lucas.overton, lvrabec, madridabogadosmx, me, mgrepl, ngompa13, noobusinghacks, plautrba, pmoore, quiquearauz20 |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | x86_64 | ||
OS: | Unspecified | ||
Whiteboard: | abrt_hash:6bd20c36aab6cf206a6bc2aca345bd83f141e7a59a36835595fe8219c180a010;VARIANT_ID=workstation; | ||
Fixed In Version: | snapd-2.33.1-1.fc27 snapd-2.33.1-1.fc28 | Doc Type: | If docs needed, set a value |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2018-07-01 22:23:18 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Giacomo F.M.
2018-05-03 07:15:01 UTC
snapd-2.33.1-1.fc28 snapd-glib-1.41-1.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-942eec912c snapd-2.33.1-1.fc27 snapd-glib-1.41-1.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2018-1330056acb snapd-2.33.1-1.fc27, snapd-glib-1.41-1.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report. snapd-2.33.1-1.fc28, snapd-glib-1.41-1.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report. Description of problem: Every time snap is involved, I get bombarded with SELinux denial alerts. Manually setting up a plethora of new policies simply doesn't help, a general solution is needed! I'm now gonna bugsubmit the hell out of this. Version-Release number of selected component: selinux-policy-3.14.1-32.fc28.noarch Additional info: reporter: libreport-2.9.5 hashmarkername: setroubleshoot kernel: 4.17.7-200.fc28.x86_64 type: libreport Description of problem: It seems that the problem was caused for using Snap. Version-Release number of selected component: selinux-policy-3.14.1-37.fc28.noarch Additional info: reporter: libreport-2.9.5 hashmarkername: setroubleshoot kernel: 4.17.12-200.fc28.x86_64 type: libreport |