Bug 473356
| Summary: | SELinux is preventing nm-system-setti (NetworkManager_t) "read" to ./PolicyKit (polkit_var_run_t). | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | morgan read <mstuff> | ||||
| Component: | selinux-policy | Assignee: | Daniel Walsh <dwalsh> | ||||
| Status: | CLOSED NEXTRELEASE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | medium | ||||||
| Version: | 8 | CC: | dwalsh, jkubin, mgrepl | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2008-12-04 14:18:57 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
morgan read
2008-11-27 23:03:09 UTC
Oh, yes: [readlegal@morgansmachine ~]$ rpm -q selinux-policy selinux-policy-3.0.8-127.fc8 Do you know what it is trying to read in that directory? ls -lZ /var/run/PolicyKit Hmm, this is a little weird - I've noticed over the last couple of days this doesn't occur on the other account I use on this machine, here's the output you asked for from the account that doesn't trigger the rash of selinux alerts above: [morgan@morgansmachine ~]$ ls -lZ /var/run/PolicyKit [morgan@morgansmachine ~]$ So, nil. Just install custom policy, since we are not likely to update policy on F8 again. You can allow this for now. # audit2allow -M mypol -l -i /var/log/audit/audit.log # semodule -i mypol.pp Will fix your problem. Problem is fixed in F9 and F10. No problem - thanks |