Bug 720949

Summary: Various AVC denied for initrc_t:unix_stream_socket { read write }
Product: [Fedora] Fedora Reporter: Miroslav Grepl <mgrepl>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 18CC: dominick.grift, dwalsh, mgrepl, redhat-bugzilla, robert.scheck
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 720939 Environment:
Last Closed: 2012-12-15 19:08:22 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 720939    
Bug Blocks:    
Attachments:
Description Flags
mypol for kdm avc's none

Comment 1 Martin Kho 2012-02-05 09:15:33 UTC
Created attachment 559447 [details]
mypol for kdm avc's

Hi,

The attachment was created with the following command:

#grep kdm /var/log/audit/audit.log | audit2allow -M mypolkdm

See also the line:

#!!!! This avc is a constraint violation.  You will need to add an attribute to either the source or target type to make it work.

Martin Kho

Comment 2 Miroslav Grepl 2012-02-06 13:35:23 UTC
What is your version of selinux-policy? 

$ rpm -q selinux-policy

Also could you attach avc msgs which you used for this local policy.

Comment 3 Miroslav Grepl 2012-12-15 19:08:22 UTC
We have heartbead and drbd policies in F18. Closing this bug,