Bug 1976502

Summary: SELinux prevents podman from accessing the dma_heap directory with read access.
Product: [Fedora] Fedora Reporter: Woti <tino.wolf.1980>
Component: selinux-policyAssignee: Zdenek Pytela <zpytela>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 33CC: dwalsh, grepl.miroslav, lvrabec, mmalik, omosnace, vmojzis, zpytela
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-07-07 13:40:22 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Woti 2021-06-26 18:10:14 UTC
Description of problem:
After updating to latest stable selinux-policy version the following message appears again and again in the log.
"SELinux prevents podman from accessing the dma_heap directory with read access."


Version-Release number of selected component (if applicable):
selinux-policy-3.14.6-38.fc33.rpm


How reproducible:
Updated to latest stable selinux-policy update.


Steps to Reproduce:
1. Update to selinux-policy-3.14.6.38
2.
3.

Actual results:
Plenty of selinux messages in the log file about "SELinux prevents podman from accessing the dma_heap directory with read access."

Expected results:
Not this message.

Additional info:
Downgrading to selinux-policy-3.14.6.28 solves the problem

Comment 1 Zdenek Pytela 2021-07-07 13:40:22 UTC

*** This bug has been marked as a duplicate of bug 1967536 ***