Description of problem: SELinux is preventing pkla-check-auth from 'associate' accesses on the shared memory Unknown. ***** Plugin associate (99.5 confidence) suggests ************************* If вы хотите изменить метку для Unknown на policykit_auth_t, но вам этого сделать нельзя, так как тип файла неправильный. Then необходимо выбрать действительную метку файла. Do select a valid file type. List valid file labels by executing: # seinfo -afile_type -x ***** Plugin catchall (1.49 confidence) suggests ************************** If вы считаете, что pkla-check-auth следует разрешить доступ associate к Unknown shm по умолчанию. Then рекомендуется создать отчет об ошибке. Чтобы разрешить доступ, можно создать локальный модуль политики. Do allow this access for now by executing: # ausearch -c 'pkla-check-auth' --raw | audit2allow -M my-pklacheckauth # semodule -X 300 -i my-pklacheckauth.pp Additional Information: Source Context system_u:system_r:policykit_auth_t:s0 Target Context system_u:system_r:unconfined_service_t:s0 Target Objects Unknown [ shm ] Source pkla-check-auth Source Path pkla-check-auth Port <Unknown> Host (removed) Source RPM Packages Target RPM Packages Policy RPM selinux-policy-3.13.1-191.5.fc24.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 4.6.4-301.fc24.x86_64 #1 SMP Tue Jul 12 11:50:00 UTC 2016 x86_64 x86_64 Alert Count 193 First Seen 2016-07-21 13:08:00 YEKT Last Seen 2016-07-21 17:01:36 YEKT Local ID 6cb4f4b5-cae8-4804-9906-707e742ae42d Raw Audit Messages type=AVC msg=audit(1469102496.283:1394): avc: denied { associate } for pid=2749 comm="pkla-check-auth" key=838865747 scontext=system_u:system_r:policykit_auth_t:s0 tcontext=system_u:system_r:unconfined_service_t:s0 tclass=shm permissive=0 Hash: pkla-check-auth,policykit_auth_t,unconfined_service_t,shm,associate Version-Release number of selected component: selinux-policy-3.13.1-191.5.fc24.noarch Additional info: reporter: libreport-2.7.1 hashmarkername: setroubleshoot kernel: 4.6.4-301.fc24.x86_64 reproducible: Not sure how to reproduce the problem type: libreport
This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component.
*** This bug has been marked as a duplicate of bug 1400648 ***