+++ This bug was initially created as a clone of Bug #1243458 +++ Description of problem: qemu-ga set password command fails with SELinux enforcing: type=AVC msg=audit(1431952168.903:567): avc: denied { write } for pid=2097 comm="chpasswd" name=".pwd.lock" dev="vda1" ino=33595649 scontext=system_u:system_r:virt_qemu_ga_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=0
HI, Could you describe whats going on here?
(In reply to Lukas Vrabec from comment #1) > HI, > Could you describe whats going on here? Hi Lukas, check parent bug. It's qemu-ga set password command that fails because of selinux rules.
commit f234eab38488802c3d8d1fa5bc25fee431fafd18 Author: Lukas Vrabec <lvrabec> Date: Wed Jul 29 11:54:26 2015 +0200 Allow virt_qemu_ga_t domtrans to passwd_t. commit d84c0f3bf9b11599245d2cbd908e20d99ea7f3e6 Author: Lukas Vrabec <lvrabec> Date: Wed Jul 29 11:52:14 2015 +0200 Label /usr/sbin/chpasswd as passwd_exec_t.
selinux-policy-3.13.1-128.10.fc22 has been submitted as an update for Fedora 22. https://admin.fedoraproject.org/updates/selinux-policy-3.13.1-128.10.fc22
Package selinux-policy-3.13.1-128.10.fc22: * should fix your issue, * was pushed to the Fedora 22 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.13.1-128.10.fc22' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2015-13501/selinux-policy-3.13.1-128.10.fc22 then log in and leave karma (feedback).
selinux-policy-3.13.1-128.10.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.
*** Bug 1322407 has been marked as a duplicate of this bug. ***