Bug 227248

Summary:	avc denial for useradd
Product:	[Fedora] Fedora	Reporter:	Michel Alexandre Salim <michel.salim>
Component:	selinux-policy-targeted	Assignee:	Daniel Walsh <dwalsh>
Status:	CLOSED WORKSFORME	QA Contact:	Ben Levenson <benl>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	rawhide
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-02-16 05:24:19 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Michel Alexandre Salim 2007-02-03 23:16:40 UTC

Description of problem:
Clean install of Fedora 7 test 1, upgraded to latest Rawhide. Every now and then
I get a new log entry stating that "SELinux is preventing /usr/sbin/useradd
(useradd_t) "read write" to faillog (var_log_t).

I have used system-config-users to create a new user and that seemed to work,
but after that I have been getting periodic repeats of this error, which is odd.

Version-Release number of selected component (if applicable):
2.5.2-4.fc7

How reproducible:
Unknown

Steps to Reproduce:
1. Use system-config-users to add new user
 

Actual results:
This apparently triggers repeated failure logs
  

Expected results:
No error

Additional info:

Comment 1 Daniel Walsh 2007-02-14 15:24:06 UTC

restorecon /var/log/faillog should fix.

This is fixed in the latest installer to label /var/log/faillog correctly.

Comment 2 Michel Alexandre Salim 2007-02-16 05:24:19 UTC

Thanks, just did that (it changes from var_log_t to faillog_t). The bizarre
thing is, using Rawhide on another machine, with SELinux set to permissive, I've
not had any useradd failures in the log even though the file context was wrong.