Bug 242853
| Summary: | SELinux denial with df on new F7 install | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | vfiend |
| Component: | selinux-policy-targeted | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED WORKSFORME | QA Contact: | Ben Levenson <benl> |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | 7 | ||
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2007-06-11 12:16:20 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Any idea what file system is "unlabeled". This usually means you have a file system that SELinux does not know about. No idea, it just happened during the first night after the install when it was running all the cron jobs the first time. I installed with F7 file system defaults, the only thing different I did was add user_xattr to / in fstab. Should I try an autorelabel or something? Hmm, hasn't happened since the first night's cron jobs after the install. Ok, well I have no idea then. I am going to close this and please reopen if it happens again. |
Summary SELinux is preventing /bin/df (logwatch_t) "getattr" to / (unlabeled_t). ... Additional Information Source Context system_u:system_r:logwatch_t Target Context system_u:object_r:unlabeled_t Target Objects / [ filesystem ] Affected RPM Packages coreutils-6.9-2.fc7 [application]filesystem-2.4.6-1.fc7 [target] Policy RPM selinux-policy-2.6.4-8.fc7 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name plugins.catchall Host Name monolith Platform Linux monolith 2.6.21-1.3194.fc7 #1 SMP Wed May 23 22:47:07 EDT 2007 x86_64 x86_64 Alert Count 2 First Seen Tue 05 Jun 2007 04:31:18 AM PDT Last Seen Tue 05 Jun 2007 04:31:18 AM PDT Local ID 05b46de7-3f60-4149-8b49-2e4e0a2f62de Line Numbers Raw Audit Messages avc: denied { getattr } for comm="df" dev=vmblock egid=0 euid=0 exe="/bin/df" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="/" pid=9721 scontext=system_u:system_r:logwatch_t:s0 sgid=0 subj=system_u:system_r:logwatch_t:s0 suid=0 tclass=filesystem tcontext=system_u:object_r:unlabeled_t:s0 tty=(none) uid=0