Bug 2237740
| Summary: | SELinux is preventing dnsdomainname from 'read' accesses on the lnk_file net. | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | kevinleroy | ||||||
| Component: | smartmontools | Assignee: | Michal Hlavinka <mhlavink> | ||||||
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
| Severity: | unspecified | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | 38 | CC: | ales.astone, kevinleroy, mhlavink, tsmetana | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | x86_64 | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | abrt_hash:486f22ee51cc552ccbac5525aadc437cf6ca56cb18d79cb57a74212fd82a93d2;VARIANT_ID=kde; | ||||||||
| Fixed In Version: | smartmontools-7.4-2.fc38 smartmontools-7.4-2.fc37 | Doc Type: | If docs needed, set a value | ||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2023-11-06 01:36:02 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
Created attachment 1987368 [details]
File: os_info
Created attachment 1987369 [details]
File: description
I've opened a pull request to fix this issue: https://src.fedoraproject.org/rpms/smartmontools/pull-request/6 *** Bug 2245440 has been marked as a duplicate of this bug. *** *** Bug 2245439 has been marked as a duplicate of this bug. *** FEDORA-2023-7662bda6bb has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2023-7662bda6bb FEDORA-2023-d23f911ae1 has been submitted as an update to Fedora 38. https://bodhi.fedoraproject.org/updates/FEDORA-2023-d23f911ae1 FEDORA-2023-d23f911ae1 has been pushed to the Fedora 38 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-d23f911ae1` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2023-d23f911ae1 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2023-7662bda6bb has been pushed to the Fedora 37 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-7662bda6bb` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2023-7662bda6bb See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2023-d23f911ae1 has been pushed to the Fedora 38 stable repository. If problem still persists, please make note of it in this bug report. FEDORA-2023-7662bda6bb has been pushed to the Fedora 37 stable repository. If problem still persists, please make note of it in this bug report. |
Description of problem: SELinux is preventing dnsdomainname from 'read' accesses on the lnk_file net. ***** Plugin catchall (100. confidence) suggests ************************** Si vous pensez que dnsdomainname devrait être autorisé à accéder read sur net lnk_file par défaut. Then vous devriez rapporter ceci en tant qu'anomalie. Vous pouvez générer un module de stratégie local pour autoriser cet accès. Do autoriser cet accès pour le moment en exécutant : # ausearch -c "dnsdomainname" --raw | audit2allow -M my-dnsdomainname # semodule -X 300 -i my-dnsdomainname.pp Additional Information: Source Context system_u:system_r:smartdwarn_t:s0 Target Context system_u:object_r:proc_net_t:s0 Target Objects net [ lnk_file ] Source dnsdomainname Source Path dnsdomainname Port <Inconnu> Host (removed) Source RPM Packages Target RPM Packages SELinux Policy RPM selinux-policy-targeted-38.25-1.fc38.noarch Local Policy RPM smartmontools-selinux-7.4-1.fc38.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 6.4.11-200.fc38.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 16 17:42:12 UTC 2023 x86_64 Alert Count 2 First Seen 2023-08-21 14:19:42 CEST Last Seen 2023-08-21 14:19:42 CEST Local ID e95dbf3b-2afd-4676-810b-d0451cac8a34 Raw Audit Messages type=AVC msg=audit(1692620382.471:346): avc: denied { read } for pid=12934 comm="dnsdomainname" name="net" dev="proc" ino=4026531845 scontext=system_u:system_r:smartdwarn_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=lnk_file permissive=0 Hash: dnsdomainname,smartdwarn_t,proc_net_t,lnk_file,read Version-Release number of selected component: selinux-policy-targeted-38.25-1.fc38.noarch Additional info: reporter: libreport-2.17.11 hashmarkername: setroubleshoot event_log: 2023-09-06-18:04:10> Looking for similar problems in bugzilla reason: SELinux is preventing dnsdomainname from 'read' accesses on the lnk_file net. package: selinux-policy-targeted-38.25-1.fc38.noarch kernel: 6.4.13-200.fc38.x86_64 type: libreport component: smartmontools component: smartmontools