Bug 1490012 - selinux errors with pcp installed
Summary: selinux errors with pcp installed
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: pcp
Version: 27
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Lukas Berk
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-09-09 04:28 UTC by Peter
Modified: 2018-02-27 17:21 UTC (History)
5 users (show)

Fixed In Version: pcp-4.0.0-2.fc26 pcp-4.0.0-2.fc27
Clone Of:
Environment:
Last Closed: 2018-02-27 16:56:04 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Peter 2017-09-09 04:28:44 UTC
Seeing quite a few selinux errors related to having pcp installed.

audit: type=1400 audit(1504927715.515:159): avc:  denied  { map } for  pid=1210 comm="hostname" path="/usr/bin/hostname" dev="dm-0" ino=113751 scontext=system_u:system_r:pcp_pmie_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file permissive=0'

audit: type=1400 audit(1504927715.584:161): avc:  denied  { execute_no_trans } for  pid=1223 comm="pmlogger_check" path="/usr/bin/pmlogger" dev="dm-0" ino=2506248 scontext=system_u:system_r:pcp_pmlogger_t:s0 tcontext=system_u:object_r:pcp_pmlogger_exec_t:s0 tclass=file permissive=0'

audit: type=1400 audit(1504924094.677:197): avc:  denied  { execute_no_trans } for  pid=3703 comm="pmie_check" path="/usr/bin/pmie" dev="dm-0" ino=2506240 scontext=system_u:system_r:pcp_pmie_t:s0 tcontext=system_u:object_r:pcp_pmie_exec_t:s0 tclass=file permissive=0

audit: type=1400 audit(1504923138.773:372): avc:  denied  { sendto } for  pid=7830 comm="logger" path="/run/systemd/journal/dev-log" scontext=system_u:system_r:pcp_pmlogger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=0

With the following packages installed.

pcp-libs-3.12.1-3.fc27.x86_64
cockpit-pcp-149.x-1.wip.fc27.x86_64
pcp-selinux-3.12.1-3.fc27.x86_64
pcp-3.12.1-3.fc27.x86_64
pcp-conf-3.12.1-3.fc27.x86_64
libselinux-python3-2.7-2.fc27.x86_64
container-selinux-2.22-1.fc27.noarch
libselinux-2.7-2.fc27.x86_64
rpm-plugin-selinux-4.14.0-0.rc1.1.fc27.x86_64
selinux-policy-3.13.1-280.fc27.noarch
libselinux-utils-2.7-2.fc27.x86_64
selinux-policy-targeted-3.13.1-280.fc27.noarch

Comment 1 Fedora Update System 2018-02-16 16:14:33 UTC
pcp-4.0.0-1.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2018-1a78dc89ec

Comment 2 Fedora Update System 2018-02-16 16:38:18 UTC
pcp-4.0.0-1.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2018-5d50796a5d

Comment 3 Fedora Update System 2018-02-19 21:40:45 UTC
pcp-4.0.0-2.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2018-84c14418ef

Comment 4 Fedora Update System 2018-02-19 21:41:20 UTC
pcp-4.0.0-2.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2018-6e29ed8f6d

Comment 5 Fedora Update System 2018-02-20 17:49:58 UTC
pcp-4.0.0-2.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-6e29ed8f6d

Comment 6 Fedora Update System 2018-02-20 18:18:31 UTC
pcp-4.0.0-2.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-84c14418ef

Comment 7 Fedora Update System 2018-02-27 16:56:04 UTC
pcp-4.0.0-2.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.

Comment 8 Fedora Update System 2018-02-27 17:21:15 UTC
pcp-4.0.0-2.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.