Description of problem: SELinux is preventing qemu-system-x86 from 'getattr' accesses on the sock_file /run/pcscd/pcscd.comm. ***** Plugin catchall (100. confidence) suggests ************************** If 您認為 qemu-system-x86 就預設值應擁有 pcscd.comm sock_file 的 getattr 存取權。 Then 您應將此回報為錯誤。 您可產生本機模組,以允許這項存取。 Do 現在透過執行以下指令來允許此存取: # grep qemu-system-x86 /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:svirt_t:s0:c334,c702 Target Context system_u:object_r:pcscd_var_run_t:s0 Target Objects /run/pcscd/pcscd.comm [ sock_file ] Source qemu-system-x86 Source Path qemu-system-x86 Port <Unknown> Host (removed) Source RPM Packages Target RPM Packages Policy RPM selinux-policy-3.13.1-158.9.fc23.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 4.4.4-301.fc23.x86_64 #1 SMP Fri Mar 4 17:42:42 UTC 2016 x86_64 x86_64 Alert Count 2 First Seen 2016-03-21 14:46:38 CST Last Seen 2016-03-21 14:46:38 CST Local ID 5ea14636-5085-4c67-ba0e-06d2111aaef6 Raw Audit Messages type=AVC msg=audit(1458542798.961:8771): avc: denied { getattr } for pid=20221 comm="qemu-system-x86" path="/run/pcscd/pcscd.comm" dev="tmpfs" ino=20521 scontext=system_u:system_r:svirt_t:s0:c334,c702 tcontext=system_u:object_r:pcscd_var_run_t:s0 tclass=sock_file permissive=0 Hash: qemu-system-x86,svirt_t,pcscd_var_run_t,sock_file,getattr Version-Release number of selected component: selinux-policy-3.13.1-158.9.fc23.noarch Additional info: reporter: libreport-2.6.4 hashmarkername: setroubleshoot kernel: 4.4.4-301.fc23.x86_64 type: libreport Potential duplicate: bug 1029297
*** This bug has been marked as a duplicate of bug 1029297 ***