Created attachment 1303489 [details] all log info Description of problem: After redhat-virtualization-host-4.1-20170721.0 installed, there are AVC denied errors (abrt-action-sav) in audit.log. # grep "avc: denied" /var/log/audit/audit.log type=AVC msg=audit(1500879742.176:197): avc: denied { write } for pid=26254 comm="abrt-action-sav" name=".dbenv.lock" dev="dm-3" ino=8786413 scontext=system_u:system_r:abrt_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file type=AVC msg=audit(1500879742.180:198): avc: denied { write } for pid=26254 comm="abrt-action-sav" name=".dbenv.lock" dev="dm-3" ino=8786413 scontext=system_u:system_r:abrt_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file type=AVC msg=audit(1500879742.181:199): avc: denied { write } for pid=26254 comm="abrt-action-sav" name=".dbenv.lock" dev="dm-3" ino=8786413 scontext=system_u:system_r:abrt_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file Version-Release number of selected component (if applicable): redhat-virtualization-host-4.1-20170721.0 imgbased-0.9.34-0.1.el7ev.noarch selinux-policy-3.13.1-166.el7.noarch How reproducible: 80% Steps to Reproduce: 1.RHVH installed successful. selinux in enforcing mode as default. 2.Login to RHVH, #grep "avc: denied" /var/log/audit/audit.log Actual results: AVC denied error msgs in audit.log Expected results: No avc denied errors in audit.log. Additional info:
I can't reproduce this. Can you provide a test system, please?
(In reply to Ryan Barry from comment #1) > I can't reproduce this. Can you provide a test system, please? Sure, I will provide the IP addr once reproduce.
Test version: redhat-virtualization-host-4.1-20170728.0 imgbased-0.9.36-0.1.el7ev.noarch selinux-policy-3.13.1-166.el7.noarch After several times testing, the issue was gone. So close this bug as CURRENTRELEASE. Feel free to re-open it if still can reproduce.