Bug 2418717
| Summary: | SELinux is preventing systemd-machine from 'search' accesses on the каталог 49191. | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Matthew Sholok <matthew.sholok> | ||||||
| Component: | selinux-policy | Assignee: | Zdenek Pytela <zpytela> | ||||||
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
| Severity: | unspecified | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | 43 | CC: | dwalsh, lvrabec, matthew.sholok, mmalik, omosnacek, pkoncity, vmojzis, zpytela | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | x86_64 | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | abrt_hash:261bbef5aa693083a0f4cac92449b34508a8b9cff51d7100f581570e3e98aae8;VARIANT_ID=kde; | ||||||||
| Fixed In Version: | Doc Type: | --- | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2025-12-04 10:45:43 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
Created attachment 2117348 [details]
File: description
Created attachment 2117349 [details]
File: os_info
*** This bug has been marked as a duplicate of bug 2407206 *** |
Description of problem: SELinux is preventing systemd-machine from 'search' accesses on the каталог 49191. ***** Plugin catchall (100. confidence) suggests ************************** Якщо ви вважаєте, що systemd-machine має бути надано типовий доступ search до 49191 directory. Then вам слід повідомити про цю помилку як про ваду. Ви можете створити модуль локальних правил для надання подібного доступу. Do доступ можна уможливити зараз за допомогою таких команд: # ausearch -c 'systemd-machine' --raw | audit2allow -M my-systemdmachine # semodule -X 300 -i my-systemdmachine.pp Additional Information: Source Context system_u:system_r:systemd_machined_t:s0 Target Context system_u:system_r:svirt_t:s0:c119,c525 Target Objects 49191 [ dir ] Source systemd-machine Source Path systemd-machine Port <Невідомо> Host (removed) Source RPM Packages Target RPM Packages SELinux Policy RPM selinux-policy-targeted-42.16-1.fc43.noarch Local Policy RPM selinux-policy-targeted-42.16-1.fc43.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 6.17.8-300.fc43.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Nov 14 01:47:12 UTC 2025 x86_64 Alert Count 1 First Seen 2025-12-03 23:36:29 EET Last Seen 2025-12-03 23:36:29 EET Local ID 6cd13e10-15f2-424c-a2ff-a89906f23646 Raw Audit Messages type=AVC msg=audit(1764797789.343:802): avc: denied { search } for pid=898 comm="systemd-machine" name="49191" dev="proc" ino=1855663 scontext=system_u:system_r:systemd_machined_t:s0 tcontext=system_u:system_r:svirt_t:s0:c119,c525 tclass=dir permissive=0 Hash: systemd-machine,systemd_machined_t,svirt_t,dir,search Version-Release number of selected component: selinux-policy-targeted-42.16-1.fc43.noarch Additional info: reporter: libreport-2.17.15 component: selinux-policy type: libreport reason: SELinux is preventing systemd-machine from 'search' accesses on the каталог 49191. hashmarkername: setroubleshoot package: selinux-policy-targeted-42.16-1.fc43.noarch kernel: 6.17.8-300.fc43.x86_64 component: selinux-policy