Bug 2184732
| Summary: | SELinux is preventing geoclue from 'watch' accesses on the adresář /etc. | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Vít Ondruch <vondruch> | ||||||
| Component: | selinux-policy | Assignee: | Zdenek Pytela <zpytela> | ||||||
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
| Severity: | unspecified | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | rawhide | CC: | dwalsh, lvrabec, mmalik, omosnacek, pkoncity, vmojzis, vondruch, zpytela | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | x86_64 | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | abrt_hash:81de2ce943e222d45eceae693863925f2c74c153d4e30e368117ff389d214fe7;VARIANT_ID=workstation; | ||||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2023-04-12 12:33:37 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
Created attachment 1955901 [details]
File: description
Created attachment 1955902 [details]
File: os_info
*** This bug has been marked as a duplicate of bug 2183190 *** |
Description of problem: SELinux is preventing geoclue from 'watch' accesses on the adresář /etc. ***** Plugin catchall_labels (83.8 confidence) suggests ******************* Pokud chcete povolit geoclue přístup typu watch na etc directory Then musíte změnit značku /etc Do # semanage fcontext -a -t TYP_SOUBORU '/etc' kde TYP_SOUBORU je jeden z následujících: geoclue_tmp_t, geoclue_var_lib_t. Pak proveďte: restorecon -v '/etc' ***** Plugin catchall (17.1 confidence) suggests ************************** Pokud jste přesvědčeni, že má geoclue mít ve výchozím stavu přístup watch na etc directory. Then měli byste tento problém nahlásit jako chybu. Abyste přístup povolili, můžete vygenerovat lokální modul pravidel. Do prozatím tento přístup povolíte příkazy: # ausearch -c 'geoclue' --raw | audit2allow -M my-geoclue # semodule -X 300 -i my-geoclue.pp Additional Information: Source Context system_u:system_r:geoclue_t:s0 Target Context system_u:object_r:etc_t:s0 Target Objects /etc [ dir ] Source geoclue Source Path geoclue Port <Neznámé> Host (removed) Source RPM Packages Target RPM Packages SELinux Policy RPM selinux-policy-targeted-38.9-1.fc39.noarch Local Policy RPM selinux-policy-targeted-38.9-1.fc39.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 6.2.9-300.fc38.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Mar 30 22:32:58 UTC 2023 x86_64 Alert Count 70 First Seen 2023-04-05 16:00:22 CEST Last Seen 2023-04-05 16:17:41 CEST Local ID d2021c92-72ac-462e-acf6-609f9e337c76 Raw Audit Messages type=AVC msg=audit(1680704261.85:293): avc: denied { watch } for pid=1217 comm="gmain" path="/etc" dev="nvme0n1p3" ino=268 scontext=system_u:system_r:geoclue_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=0 Hash: geoclue,geoclue_t,etc_t,dir,watch Version-Release number of selected component: selinux-policy-targeted-38.9-1.fc39.noarch Additional info: reporter: libreport-2.17.9 reason: SELinux is preventing geoclue from 'watch' accesses on the adresář /etc. package: selinux-policy-targeted-38.9-1.fc39.noarch component: selinux-policy hashmarkername: setroubleshoot type: libreport kernel: 6.2.9-300.fc38.x86_64 component: selinux-policy