Bug 219985
| Summary: | mcstransd denials | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Dave Jones <davej> |
| Component: | selinux-policy-targeted | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Ben Levenson <benl> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | rawhide | CC: | pfrields |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Current | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2007-08-22 14:14:37 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
restorecon /etc/localtime The current policy should prevent this from happening in the future, since /usr/sbin/tzdata-update now has policy that says if it creates a file in etc_t create it as localtime_t Should be fixed in the current release |
Dec 17 19:50:34 silver kernel: audit(1166406634.351:4): avc: denied { read } for pid=1580 comm="mcstransd" name="localtime" dev=dm-0 ino=3932186 scontext= system_u:system_r:setrans_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file Dec 17 19:50:34 silver kernel: audit(1166406634.379:5): avc: denied { read } for pid=1580 comm="mcstransd" name="localtime" dev=dm-0 ino=3932186 scontext= system_u:system_r:setrans_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file Dec 17 19:50:34 silver kernel: audit(1166406634.403:6): avc: denied { read } for pid=1580 comm="mcstransd" name="localtime" dev=dm-0 ino=3932186 scontext= system_u:system_r:setrans_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file Dec 17 19:50:34 silver kernel: audit(1166406634.427:7): avc: denied { read } for pid=1580 comm="mcstransd" name="localtime" dev=dm-0 ino=3932186 scontext= system_u:system_r:setrans_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file Dec 17 19:50:34 silver kernel: audit(1166406634.487:8): avc: denied { read } for pid=1581 comm="mcstransd" name="localtime" dev=dm-0 ino=3932186 scontext= system_u:system_r:setrans_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file Dec 17 19:50:34 silver kernel: audit(1166406634.515:9): avc: denied { read } for pid=1581 comm="mcstransd" name="localtime" dev=dm-0 ino=3932186 scontext= system_u:system_r:setrans_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file Dec 17 19:50:34 silver kernel: audit(1166406634.547:10): avc: denied { read } for pid=1581 comm="mcstransd" name="localtime" dev=dm-0 ino=3932186 scontext =system_u:system_r:setrans_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file