Bug 2299660
| Summary: | SELinux is preventing systemd-fstab-g from read, write access on the fichier /run/systemd/generator/dev-mapper-luks\x2d044f8689\x2da356\x2d45cc\x2da75d\x2d6c00deb3d51e.device.d/.#50-device-timeout.conf7240aabb6cb55978. | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | kevinleroy | ||||||
| Component: | selinux-policy | Assignee: | Zdenek Pytela <zpytela> | ||||||
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
| Severity: | unspecified | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | 40 | CC: | dwalsh, kevinleroy, lvrabec, mmalik, omosnacek, pkoncity, vmojzis, zpytela | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | x86_64 | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | abrt_hash:e66a69f4030e08073c2649026e12758d3b11b1c6c1eeea9d6799cd22b01fc8b3;VARIANT_ID=kde; | ||||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2024-07-24 13:20:40 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
Created attachment 2040284 [details]
File: os_info
Created attachment 2040285 [details]
File: description
*** This bug has been marked as a duplicate of bug 2292191 *** |
Description of problem: SELinux alert apparair after all updates with dnf update SELinux is preventing systemd-fstab-g from read, write access on the fichier /run/systemd/generator/dev-mapper-luks\x2d044f8689\x2da356\x2d45cc\x2da75d\x2d6c00deb3d51e.device.d/.#50-device-timeout.conf7240aabb6cb55978. ***** Plugin restorecon (99.5 confidence) suggests ************************ Si vous souhaitez corriger l'étiquette. L'étiquette par défaut de /run/systemd/generator/dev-mapper-luks\x2d044f8689\x2da356\x2d45cc\x2da75d\x2d6c00deb3d51e.device.d/.#50-device-timeout.conf7240aabb6cb55978 devrait être systemd_unit_file_t. Then vous pouvez lancer restorecon. La tentative d’accès pourrait avoir été stoppée due à des permissions insuffisantes d’accès au dossier parent, auquel cas essayez de changer la commande suivante en conséquence. Do # /sbin/restorecon -v /run/systemd/generator/dev-mapper-luks\x2d044f8689\x2da356\x2d45cc\x2da75d\x2d6c00deb3d51e.device.d/.#50-device-timeout.conf7240aabb6cb55978 ***** Plugin catchall (1.49 confidence) suggests ************************** Si vous pensez que systemd-fstab-g devrait être autorisé à accéder read write sur .#50-device-timeout.conf7240aabb6cb55978 file par défaut. Then vous devriez rapporter ceci en tant qu'anomalie. Vous pouvez générer un module de stratégie local pour autoriser cet accès. Do autoriser cet accès pour le moment en exécutant : # ausearch -c "systemd-fstab-g" --raw | audit2allow -M my-systemdfstabg # semodule -X 300 -i my-systemdfstabg.pp Additional Information: Source Context system_u:system_r:systemd_fstab_generator_t:s0 Target Context system_u:object_r:systemd_cryptsetup_generator_uni t_file_t:s0 Target Objects /run/systemd/generator/dev-mapper-luks\x2d044f8689 \x2da356\x2d45cc\x2da75d\x2d6c00deb3d51e.device.d/ .#50-device-timeout.conf7240aabb6cb55978 [ file ] Source systemd-fstab-g Source Path systemd-fstab-g Port <Inconnu> Host (removed) Source RPM Packages Target RPM Packages SELinux Policy RPM selinux-policy-targeted-40.24-1.fc40.noarch Local Policy RPM selinux-policy-targeted-40.24-1.fc40.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 6.9.9-200.fc40.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Jul 11 19:29:01 UTC 2024 x86_64 Alert Count 28 First Seen 2024-06-27 12:09:03 CEST Last Seen 2024-07-24 12:42:42 CEST Local ID 3dee19f7-5479-4aff-a7fd-f040d0e8a22c Raw Audit Messages type=AVC msg=audit(1721817762.172:1886): avc: denied { read write } for pid=1801341 comm="systemd-fstab-g" path="/run/systemd/generator/dev-mapper-luks\x2d044f8689\x2da356\x2d45cc\x2da75d\x2d6c00deb3d51e.device.d/.#50-device-timeout.conf7240aabb6cb55978" dev="tmpfs" ino=11276 scontext=system_u:system_r:systemd_fstab_generator_t:s0 tcontext=system_u:object_r:systemd_cryptsetup_generator_unit_file_t:s0 tclass=file permissive=0 Hash: systemd-fstab-g,systemd_fstab_generator_t,systemd_cryptsetup_generator_unit_file_t,file,read,write Version-Release number of selected component: selinux-policy-targeted-40.24-1.fc40.noarch Additional info: reporter: libreport-2.17.15 hashmarkername: setroubleshoot comment: SELinux alert apparair after all updates with dnf update reason: SELinux is preventing systemd-fstab-g from read, write access on the fichier /run/systemd/generator/dev-mapper-luks\x2d044f8689\x2da356\x2d45cc\x2da75d\x2d6c00deb3d51e.device.d/.#50-device-timeout.conf7240aabb6cb55978. package: selinux-policy-targeted-40.24-1.fc40.noarch kernel: 6.9.9-200.fc40.x86_64 type: libreport component: selinux-policy component: selinux-policy