Bug 471044

Summary: SELinux is preventing updatedb (locate_t) "getattr" fusefs_t
Product: [Fedora] Fedora Reporter: Kevin Francis <kevin>
Component: selinux-policyAssignee: Daniel Walsh <dwalsh>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 10CC: adrruiz, dwalsh, jkubin, jlaska, mgrepl
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-01-08 14:27:57 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
SELinux alerts none

Description Kevin Francis 2008-11-11 15:30:42 UTC 
Description of problem:
When updatedb runs the first time, it causes SELinux to throw a context violation notice.

Version-Release number of selected component (if applicable):


How reproducible:
Not sure, first run?

Steps to Reproduce:
1. Install Fedora 10 preview
2. Leave it on overnight (and logged in)
3. Find the notice in the tray when morning comes
  
Actual results:


Expected results:


Additional info:
Comment 1 Kevin Francis 2008-11-11 15:33:28 UTC 
Created attachment 323180 [details]
SELinux alerts

This is the list of alerts.
Comment 2 Kevin Francis 2008-11-11 15:34:58 UTC 
(In reply to comment #0)
> Description of problem:
> When updatedb runs the first time, it causes SELinux to throw a context
> violation notice.

This appears to no longer be true. The alerts I've just attached are from the second manual attempt I've done.

Btw, updatedb completes its tasks fine (or appears to) as I can locate files.
Comment 3 Daniel Walsh 2008-11-13 13:34:41 UTC 
# audit2allow -M mypol -l -i /var/log/audit/audit.log
# semodule -i mypol.pp

Fixed in selinux-policy-3.5.13-20.fc10
Comment 4 Bug Zapper 2008-11-26 05:11:49 UTC 
This bug appears to have been reported against 'rawhide' during the Fedora 10 development cycle.
Changing version to '10'.

More information and reason for this action is here:
http://fedoraproject.org/wiki/BugZappers/HouseKeeping