Bug 882486

Summary: SELinux is preventing /usr/bin/updatedb from 'getattr' accesses on the directory /var/lib/nfs/rpc_pipefs.
Product: [Fedora] Fedora Reporter: Frank Murphy <frankly3d>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 18CC: dominick.grift, dwalsh, mgrepl, sheepdestroyer
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Unspecified   
Whiteboard: abrt_hash:085451fe2c458234305da15d53479d0440d3163ea142f49c53aa5d6f9ef1948f
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-12-03 08:19:07 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: description none

Description Frank Murphy 2012-12-01 10:39:15 UTC
Description of problem:
Upgraded tht vm using fedup F17 > F18-Beta. Yesterday.
yum upgrade this morning.
reboot with telinit 3 (dm problems)
startx
sealert was waiting with this.

Additional info:
hashmarkername: setroubleshoot
kernel:         3.6.7-5.fc18.i686
type:           libreport

Comment 1 Frank Murphy 2012-12-01 10:39:18 UTC
Created attachment 655491 [details]
File: description

Comment 2 Frank Murphy 2012-12-01 10:57:11 UTC
I don't believe it's badly labelled as fixfiles onboot is run as a service.

The second option, when attempted cam up as a /sbin/semanage bad option


Uncertain about:
 grep updatedb /var/log/audit/audit.log | audit2allow -M mypol
due to lack of knowledge whether updatedb really needs this access.

So I'm left with reporting.

Comment 3 Miroslav Grepl 2012-12-03 08:19:07 UTC

*** This bug has been marked as a duplicate of bug 882255 ***