Bug 1458860 - gssproxy generates nonfatal selinux messages
Summary: gssproxy generates nonfatal selinux messages
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: gssproxy
Version: 27
Hardware: Unspecified
OS: Unspecified
low
low
Target Milestone: ---
Assignee: Robbie Harwood
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On: 1458850
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-06-05 16:44 UTC by Robbie Harwood
Modified: 2017-11-11 02:47 UTC (History)
5 users (show)

Fixed In Version: gssproxy-0.7.0-21.fc27
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1458850
Environment:
Last Closed: 2017-11-11 02:47:50 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Robbie Harwood 2017-06-05 16:44:20 UTC
+++ This bug was initially created as a clone of Bug #1458850 +++

Running: /usr/sbin/ausearch  -sv no -m AVC -ts  05/31/2017 23:57:19 
 SELinux Check: FAIL
 SELinux AVC messages found:
 ----
 time->Wed May 31 23:57:42 2017
 type=SYSCALL msg=audit(1496289462.631:297706): arch=c000003e syscall=137 success=no exit=-13 a0=7f1c6b6766c0 a1=7ffc39592a90 a2=fffffffffff47428 a3=7ffc395928c0 items=0 ppid=1 pid=10308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="gssproxy" exe="/usr/sbin/gssproxy" subj=system_u:system_r:gssproxy_t:s0 key=(null)
 type=AVC msg=audit(1496289462.631:297706): avc:  denied  { getattr } for  pid=10308 comm="gssproxy" name="/" dev="vda2" ino=2 scontext=system_u:system_r:gssproxy_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
 ----
 time->Wed May 31 23:57:42 2017
 type=SYSCALL msg=audit(1496289462.840:297712): arch=c000003e syscall=137 success=no exit=-13 a0=7f17579576c0 a1=7ffd78399c40 a2=fffffffffff47428 a3=7ffd78399a70 items=0 ppid=1 pid=10340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="gssproxy" exe="/usr/sbin/gssproxy" subj=system_u:system_r:gssproxy_t:s0 key=(null)
 type=AVC msg=audit(1496289462.840:297712): avc:  denied  { getattr } for  pid=10340 comm="gssproxy" name="/" dev="vda2" ino=2 scontext=system_u:system_r:gssproxy_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
 ----
 time->Wed May 31 23:58:05 2017
 type=SYSCALL msg=audit(1496289485.517:297738): arch=c000003e syscall=137 success=no exit=-13 a0=7f2209f2b6c0 a1=7ffd11b3be80 a2=fffffffffff47428 a3=7ffd11b3bcb0 items=0 ppid=1 pid=10659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="gssproxy" exe="/usr/sbin/gssproxy" subj=system_u:system_r:gssproxy_t:s0 key=(null)
 type=AVC msg=audit(1496289485.517:297738): avc:  denied  { getattr } for  pid=10659 comm="gssproxy" name="/" dev="vda2" ino=2 scontext=system_u:system_r:gssproxy_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem

--- Additional comment from Robbie Harwood on 2017-06-05 12:42:33 EDT ---

We haven't looked into why this happens, but it doesn't break anything we've seen so far.  Thanks for the report.

Comment 1 Jan Kurik 2017-08-15 07:30:44 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 27 development cycle.
Changing version to '27'.

Comment 2 Fedora Update System 2017-09-29 20:05:22 UTC
gssproxy-0.7.0-19.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-c48f3d65b0

Comment 3 Fedora Update System 2017-10-02 00:56:19 UTC
gssproxy-0.7.0-19.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-c48f3d65b0

Comment 4 Fedora Update System 2017-10-02 18:24:18 UTC
gssproxy-0.7.0-21.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-11e3b0a6c1

Comment 5 Fedora Update System 2017-10-06 04:24:41 UTC
gssproxy-0.7.0-21.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-11e3b0a6c1

Comment 6 Fedora Update System 2017-11-11 02:47:50 UTC
gssproxy-0.7.0-21.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.