Bug 885215
| Summary: | SELinux is preventing access to an LVM volume | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Jason Montleon <jmontleo> |
| Component: | selinux-policy-targeted | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED DUPLICATE | QA Contact: | Ben Levenson <benl> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 18 | CC: | dwalsh |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2012-12-07 20:14:33 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Sorry, I accidentally submitted this before finishing the write up. Version-Release number of selected component (if applicable): Fedora 18 Beta selinux-policy-targeted-3.11.1-59.fc18.noarch How reproducible: I have one system exhibiting this behavior, and don't have any others with multiple disks to test on, so I can't confirm. Steps to Reproduce: 1. Install Fedora 17 2. Set up a second PV/VG/LV and mount it on your system 3. Upgrade to Fedora 18 Beta Actual results: File system is not accessible Expected results: File System works as expected. Additional info: I'm seeing denials not just for getattr's but also read, search, open, etc. I'll work on getting some good additional logs from audit.log to attach. disregard, just found a thread pointing to 882255 and the update to -60 fixed it. *** This bug has been marked as a duplicate of bug 882255 *** |
Description of problem: I have a separate physical disk with a different PV/VG/LV mount on my system under /mnt/backup. Since upgrading to Fedora 17 when I do an ls I get: [jason@his backup]$ ls -al ls: cannot access mini: Permission denied ls: cannot access his: Permission denied ls: cannot access windows: Permission denied total 24 drwxr-xr-x. 6 jason jason 4096 Sep 13 21:47 . drwxr-xr-x. 3 root root 4096 Jul 19 10:58 .. d?????????? ? ? ? ? ? his drwx------. 2 jason jason 16384 Sep 13 21:44 lost+found d?????????? ? ? ? ? ? mini d?????????? ? ? ? ? ? windows When I do a setenforce 0 things start working as expected. The AVC I am seeing is: type=AVC msg=audit(1354905020.735:13145): avc: denied { getattr } for pid=8008 comm="ls" path="/mnt/backup/mini" dev="dm-2" ino=13369345 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=dir Using audit to allow with this single entry and installing the modules seems to get ls working, but reading/writing/searching and other tasks fail. Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info: