Bug 2316163
| Summary: | SELinux is preventing /usr/lib/systemd/systemd-homed from read access on the directory home | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | seanmottles | ||||
| Component: | selinux-policy | Assignee: | Zdenek Pytela <zpytela> | ||||
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | 41 | CC: | dwalsh, lvrabec, mmalik, omosnacek, pkoncity, vmojzis, zpytela | ||||
| Target Milestone: | --- | Keywords: | SELinux | ||||
| Target Release: | --- | ||||||
| Hardware: | x86_64 | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2024-10-03 14:15:08 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
More details: root@t470:~# rpm -qa | grep selinux libselinux-3.7-5.fc41.x86_64 libselinux-utils-3.7-5.fc41.x86_64 python3-libselinux-3.7-5.fc41.x86_64 smartmontools-selinux-7.4-6.fc41.noarch passt-selinux-0^20240906.g6b38f07-1.fc41.noarch libselinux-3.7-5.fc41.i686 rpm-plugin-selinux-4.19.94-1.fc41.x86_64 selinux-policy-41.19-1.fc41.noarch selinux-policy-targeted-41.19-1.fc41.noarch nbdkit-selinux-1.40.4-1.fc41.noarch swtpm-selinux-0.9.0-4.fc41.noarch root@t470:~# rpm -qa | grep audit audit-libs-4.0.2-1.fc41.x86_64 audit-rules-4.0.2-1.fc41.x86_64 audit-4.0.2-1.fc41.x86_64 python3-audit-4.0.2-1.fc41.x86_64 audit-libs-4.0.2-1.fc41.i686 rpm-plugin-audit-4.19.94-1.fc41.x86_64 Created attachment 2050110 [details]
SETroublshoot Details
*** This bug has been marked as a duplicate of bug 2036108 *** |
Upon login of F41 XFCE spin the SELinux Alert icon shows up with the attached errors. Reproducible: Always Steps to Reproduce: 1. Install F41 XFCE 2. Login as normal user 3. Actual Results: Oct 02 19:18:22 t470 systemd-homed[787]: Watching /home. Oct 02 19:18:22 t470 audit[787]: AVC avc: denied { read } for pid=787 comm="systemd-homed" name="home" dev="nvme0n1p3" ino=2885717 scontext=system_u:system_r:systemd_homed_t:s0 tcontext=> [...] Oct 02 19:18:22 t470 systemd-homed[787]: Failed to open /var/cache/systemd/home/: Permission denied Expected Results: No errors.