Bug 1321785 - [SELinux] user_avc seen in audit logs while nfs-ganesha configuration -RHEL7
Summary: [SELinux] user_avc seen in audit logs while nfs-ganesha configuration -RHEL7
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: selinux-policy
Version: 7.2
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: rc
: ---
Assignee: Lukas Vrabec
QA Contact: Milos Malik
URL:
Whiteboard:
Depends On:
Blocks: 1321781
TreeView+ depends on / blocked
 
Reported: 2016-03-29 07:12 UTC by Shashank Raj
Modified: 2016-11-08 03:53 UTC (History)
18 users (show)

Fixed In Version: selinux-policy-3.13.1-82.el7
Doc Type: Bug Fix
Doc Text:
Clone Of: 1321781
Environment:
Last Closed: 2016-11-04 02:45:52 UTC
Target Upstream Version:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2016:2283 0 normal SHIPPED_LIVE selinux-policy bug fix and enhancement update 2016-11-03 13:36:25 UTC

Comment 2 Lukas Vrabec 2016-06-22 15:51:47 UTC
Hi Sraj, 
What is state of this issue? Can you still reproduce?

Comment 3 Shashank Raj 2016-06-24 09:49:24 UTC
Yes Lukas,

I still below AVC's with the latest ganesha builds:

type=USER_AVC msg=audit(1466759986.564:3277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  denied  { status } for auid=n/a uid=0 gid=0 cmdline="systemctl is-enabled corosync pacemaker pcsd" scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'

type=USER_AVC msg=audit(1466759968.317:3273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  denied  { status } for auid=n/a uid=0 gid=0 cmdline="systemctl is-enabled corosync pacemaker pcsd" scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'

Comment 8 errata-xmlrpc 2016-11-04 02:45:52 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-2283.html


Note You need to log in before you can comment on or make changes to this bug.