Bug 442823

Summary: SELinux is preventing polkit-resolve- (hald_t) "getattr" to <Unknown> (hald_t).
Product: [Fedora] Fedora Reporter: Flóki Pálsson <flokip>
Component: selinux-policyAssignee: Daniel Walsh <dwalsh>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: low    
Version: rawhideCC: jkubin
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-04-17 12:25:17 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
SElinux AVC and ll of files as root and user
none
audit.log none

Description Flóki Pálsson 2008-04-17 01:36:13 UTC 
Description of problem:
User can not access files on another disk /dev/sda. 
 

Version-Release number of selected component (if applicable):
selinux-policy-3.3.1-33.fc9.noarch

How reproducible:
Always

Steps to Reproduce:
1.
reboot login as user ( floki ) and tray to access with Nautilus on separate disk
( /tonlist )
2.
If I log user out  ( floki ) and then log in as root and then log root out and
user in again then user can access the files on separate disk 
3.
  
Actual results:
When as user then SElinux forbids access.
SELinux is preventing polkit-resolve- (hald_t) "getattr" to <Unknown> (hald_t). 

In permessive mode it is possible to access files on separate disk 

Expected results:
In FC8 then there is no problem to access /tonlist.
FC8 is on third disk. 

Additional info:
Comment 1 Flóki Pálsson 2008-04-17 01:36:14 UTC 
Created attachment 302687 [details]
SElinux AVC and ll of files as root and user
Comment 2 Flóki Pálsson 2008-04-17 01:38:42 UTC 
Created attachment 302688 [details]
audit.log

The audit log
Comment 3 Daniel Walsh 2008-04-17 12:25:17 UTC 
You can allow this for now.

# audit2allow -M mypol -l -i /var/log/audit/audit.log
# semodule -i mypol.pp

Fixed in selinux-policy-3.3.1-35.fc9.noarch
Comment 4 Flóki Pálsson 2008-04-17 22:42:26 UTC 
The probem is not solved.
There are no SELinux warnings.

I can access the files on other disk in permessive mode. 
When I  change to Enforcing mode again I to can access the files on other disk.

After rebooting the files are not accessable.

selinux-policy-3.3.1-35.fc9.noarch  is installed.

I have rebooted useding  "Relabel on next reboot"