Red Hat Bugzilla – Bug 1462382
SELinux denies systemd-importd access to /var/lib/machines
Last modified: 2017-06-16 19:40:33 EDT
I am not very informed about SELinux, so I am giving everything I can in this report. I was trying to import an image of CentOS using machinectl as,
$ sudo machinectl pull-raw http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.raw.tar.gz
But it failed saying "Failed to transfer image: Access denied," with a SELinux alert.
The alert reports, that systemd-importd was denied read access to /var/lib/machines. I know that this directory is where machinectl pulls and stores images.
If I browse through nautilus and look at the properties of /var/lib/machines, its SELinux Context is system_u:object_r:systemd_machined_var_lib_t:s0.
Image is pulled, extracted and stored under a new directory of the image name.