https://github.com/selinux-policy/selinux-policy/pull/6 Please add this to both Fedora and RHEL7 selinux-policy. # systemctl start couchdb.service type=AVC msg=audit(1415836773.817:579): avc: denied { search } for pid=16934 comm="df" name="nfs" dev="dm-1" ino=4458965 scontext=system_u:system_r:couchdb_t:s0 tcontext=system_u:object_r:var_lib_nfs_t:s0 tclass=dir permissive=0 type=AVC msg=audit(1415836773.817:580): avc: denied { getattr } for pid=16934 comm="df" path="/home/warren" dev="dm-3" ino=2 scontext=system_u:system_r:couchdb_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir permissive=0 type=AVC msg=audit(1415836773.817:581): avc: denied { getattr } for pid=16934 comm="df" path="/home/warren" dev="dm-3" ino=2 scontext=system_u:system_r:couchdb_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir permissive=0 ### Reproduce Procedure # yum install couchdb nodejs npm jq wget -y # useradd test # su - test ### install bitcoind # mkdir bin # cd bin # wget https://bitcoin.org/bin/0.9.2.1/bitcoin-0.9.2.1-linux.tar.gz # tar xfv bitcoin-0.9.2.1-linux.tar.gz # ln -sf bitcoin-0.9.2.1-linux/bin/64/bitcoind # cd ~ ### install baron # git clone https://github.com/slickage/baron.git # cd baron # npm install # echo "BARONDIR=$(pwd)" > tests/barontester/barontester.conf # cd tests/barontester/ # ./barontester.sh type=AVC msg=audit(1415836839.090:584): avc: denied { execmem } for pid=18668 comm="couchjs" scontext=system_u:system_r:couchdb_t:s0 tcontext=system_u:system_r:couchdb_t:s0 tclass=process permissive=0
Thank you for pull request. I ask some questions in pull request on git hub which must be answered to be add to fedora selinux-policy package.
Patch added.
selinux-policy-3.12.1-196.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/selinux-policy-3.12.1-196.fc20
Package selinux-policy-3.12.1-196.fc20: * should fix your issue, * was pushed to the Fedora 20 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.12.1-196.fc20' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2014-16229/selinux-policy-3.12.1-196.fc20 then log in and leave karma (feedback).
selinux-policy-3.12.1-196.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.
See Bug #1177716 for a remaining issue that prevents couchdb from starting on Fedora 21.