Bug 2181391

Summary: [RHEL-9.2] avc: denied { module_request } for pid=101204 comm="rpc.statd" kmod="net-pf-10"
Product: Red Hat Enterprise Linux 9 Reporter: PaulB <pbunyan>
Component: selinux-policyAssignee: Nikola Knazekova <nknazeko>
Status: CLOSED DUPLICATE QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: medium Docs Contact:
Priority: low    
Version: 9.2CC: jbastian, lvrabec, mmalik, pbunyan, yieli, zpytela
Target Milestone: rcKeywords: Triaged
Target Release: ---   
Hardware: aarch64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-07-14 13:40:08 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description PaulB 2023-03-24 01:12:45 UTC
Description of problem:
The following avc issue is reported when testing target system:
 avc:  denied  { module_request } for  pid=101204 comm="rpc.statd" kmod="net-pf-10"

Version-Release number of selected component (if applicable):
 distro: RHEL-9.2.0-20230321.9
 kernel: 5.14.0-284.4.1.el9_2
 selinux-policy: 38.1.9-1.el9_2.noarch
 test: /kernel/filesystems/nfs/connectathon 3.0-100

How reproducible:
yes issue is reproducible

Steps to Reproduce:
1. Install nvidia-bluefield2 host with RHEL-9.2.0-20230321.9
2. Install  kernel 5.14.0-284.4.1.el9_2
3. Run /kernel/filesystems/nfs/connectathon 3.0-100

Actual results:
https://beaker.engineering.redhat.com/recipes/13606079#task157959253
https://beaker-archive.hosts.prod.psi.bos.redhat.com/beaker-logs/2023/03/76586/7658680/13606079/157959253/738790047/avc.log
---%<-snip->%---
avc:  denied  { module_request } for  pid=101204 comm="rpc.statd" kmod="net-pf-10" scontext=system_u:system_r:rpcd_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=0
---%<-snip->%---

Expected results:
NO AVC messages are expected

Additional info:

Comment 2 Nikola Knazekova 2023-04-26 16:54:25 UTC
Hi,
do you have enabled IPv6?

Comment 3 Zdenek Pytela 2023-07-14 13:40:08 UTC

*** This bug has been marked as a duplicate of bug 2181389 ***