Bug 202825
| Summary: | avc complaint on hpiod startup | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Brian Brock <bbrock> |
| Component: | selinux-policy-targeted | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | rawhide | ||
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Current | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2007-08-22 14:13:39 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
the error is visible in the guest's dmesg; the dom0 never has an avc: denied message. Fixed in selinux-policy-2.3.14-3 Should be fixed in the current release |
error message generated from selinux when starting hplip in a xen guest rawhide-20060816 hplip-1.6.6a-3.1 libselinux-1.30.19-5 libselinux-python-1.30.19-5 selinux-policy-2.3.3-18 selinux-policy-targeted-2.3.3-18 kernel 2.6.17-1.2517.fc6xen start a xen guest, with hplip installed run `service hplip start` check dmesg, the following message has appeared: audit(1155747153.978:5): avc: denied { read } for pid=1682 comm="hpiod" name="/" dev=usbfs ino=865 scontext=root:system_r:hplip_t:s0 tcontext=system_u:object_r:usbfs_t:s0 tclass=dir I've only reproduced this in a xen guest, so far. It doesn't seem to matter with the dom0 has hplip installed and running.