SELinux is preventing ps from using the sys_admin capability.
***** Plugin catchall (100. confidence) suggests **************************
If you believe that ps should have the sys_admin capability by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'ps' --raw | audit2allow -M my-ps
# semodule -X 300 -i my-ps.pp
Additional Information:
Source Context system_u:system_r:pcp_pmie_t:s0
Target Context system_u:system_r:pcp_pmie_t:s0
Target Objects Unknown [ capability ]
Source ps
Source Path ps
Port <Unknown>
Host <Unknown>
Source RPM Packages
Target RPM Packages
SELinux Policy RPM selinux-policy-targeted-41.38-1.fc42.noarch
Local Policy RPM pcp-selinux-6.3.7-2.fc42.x86_64
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name example.com
Platform Linux example.com 6.14.3-300.fc42.x86_64 #1
SMP PREEMPT_DYNAMIC Sun Apr 20 16:08:39 UTC 2025
x86_64
Alert Count 2290
First Seen 2025-04-24 21:58:11 CEST
Last Seen 2025-05-18 16:58:19 CEST
Local ID 56cbafde-d867-4e56-b24f-5c6e51b6accd
Raw Audit Messages
type=AVC msg=audit(1747580299.432:13569): avc: denied { sys_admin } for pid=676466 comm="ps" capability=21 scontext=system_u:system_r:pcp_pmie_t:s0 tcontext=system_u:system_r:pcp_pmie_t:s0 tclass=capability permissive=0
Hash: ps,pcp_pmie_t,pcp_pmie_t,capability,sys_admin
Reproducible: Always
SELinux is preventing ps from using the sys_admin capability. ***** Plugin catchall (100. confidence) suggests ************************** If you believe that ps should have the sys_admin capability by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'ps' --raw | audit2allow -M my-ps # semodule -X 300 -i my-ps.pp Additional Information: Source Context system_u:system_r:pcp_pmie_t:s0 Target Context system_u:system_r:pcp_pmie_t:s0 Target Objects Unknown [ capability ] Source ps Source Path ps Port <Unknown> Host <Unknown> Source RPM Packages Target RPM Packages SELinux Policy RPM selinux-policy-targeted-41.38-1.fc42.noarch Local Policy RPM pcp-selinux-6.3.7-2.fc42.x86_64 Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name example.com Platform Linux example.com 6.14.3-300.fc42.x86_64 #1 SMP PREEMPT_DYNAMIC Sun Apr 20 16:08:39 UTC 2025 x86_64 Alert Count 2290 First Seen 2025-04-24 21:58:11 CEST Last Seen 2025-05-18 16:58:19 CEST Local ID 56cbafde-d867-4e56-b24f-5c6e51b6accd Raw Audit Messages type=AVC msg=audit(1747580299.432:13569): avc: denied { sys_admin } for pid=676466 comm="ps" capability=21 scontext=system_u:system_r:pcp_pmie_t:s0 tcontext=system_u:system_r:pcp_pmie_t:s0 tclass=capability permissive=0 Hash: ps,pcp_pmie_t,pcp_pmie_t,capability,sys_admin Reproducible: Always