Bug 2283716
| Summary: | SELinux is preventing rpc-virtnetwork from 'search' accesses on the carpeta 3391. | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Alex Villacís Lasso <alexvillacislasso> | ||||||
| Component: | selinux-policy | Assignee: | Zdenek Pytela <zpytela> | ||||||
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
| Severity: | unspecified | Docs Contact: | |||||||
| Priority: | medium | ||||||||
| Version: | 40 | CC: | alexvillacislasso, dwalsh, lvrabec, mmalik, omosnacek, pkoncity, vmojzis, zpytela | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | x86_64 | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | abrt_hash:8b3f6c7a41794ab9a6d7db0d3131809c94a156a297cf598eb2e4c84a159198ba;VARIANT_ID=workstation; | ||||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2024-11-18 16:07:12 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
Created attachment 2035507 [details]
File: description
Created attachment 2035508 [details]
File: os_info
*** This bug has been marked as a duplicate of bug 2293199 *** |
Description of problem: Started Virtual Machine Manager and attempted to start a LXC virtual machine SELinux is preventing rpc-virtnetwork from 'search' accesses on the carpeta 3391. ***** Plugin catchall (100. confidence) suggests ************************** Si cree que de manera predeterminada se debería permitir a rpc-virtnetwork el acceso search sobre 3391 directory. Then debería reportar esto como un error. Puede generar un módulo de política local para permitir este acceso. Do permita el acceso temporalmente ejecutando: # ausearch -c 'rpc-virtnetwork' --raw | audit2allow -M mi-rpcvirtnetwork # semodule -X 300 -i mi-rpcvirtnetwork.pp Additional Information: Source Context system_u:system_r:virtnetworkd_t:s0 Target Context system_u:system_r:virtd_lxc_t:s0 Target Objects 3391 [ dir ] Source rpc-virtnetwork Source Path rpc-virtnetwork Port <Desconocido> Host (removed) Source RPM Packages Target RPM Packages SELinux Policy RPM selinux-policy-targeted-40.20-1.fc40.noarch Local Policy RPM selinux-policy-targeted-40.20-1.fc40.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 6.8.10-300.fc40.x86_64 #1 SMP PREEMPT_DYNAMIC Fri May 17 21:20:54 UTC 2024 x86_64 Alert Count 14 First Seen 2024-05-28 20:15:46 -05 Last Seen 2024-05-28 20:31:01 -05 Local ID 587171fe-4432-4d8c-8cf6-a2ccefd9156a Raw Audit Messages type=AVC msg=audit(1716946261.480:373): avc: denied { search } for pid=3907 comm="prio-rpc-virtne" name="3391" dev="proc" ino=23495 scontext=system_u:system_r:virtnetworkd_t:s0 tcontext=system_u:system_r:virtd_lxc_t:s0 tclass=dir permissive=0 Hash: rpc-virtnetwork,virtnetworkd_t,virtd_lxc_t,dir,search Version-Release number of selected component: selinux-policy-targeted-40.20-1.fc40.noarch Additional info: reporter: libreport-2.17.15 hashmarkername: setroubleshoot reason: SELinux is preventing rpc-virtnetwork from 'search' accesses on the carpeta 3391. component: selinux-policy comment: Started Virtual Machine Manager and attempted to start a LXC virtual machine kernel: 6.8.10-300.fc40.x86_64 type: libreport package: selinux-policy-targeted-40.20-1.fc40.noarch component: selinux-policy