Description of problem: It happens at system startup SELinux is preventing pmcd from 'execute' accesses on the file /var/lib/pcp/pmns/Rebuild. ***** Plugin catchall (100. confidence) suggests ************************** If you believe that pmcd should be allowed execute access on the Rebuild file by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'pmcd' --raw | audit2allow -M my-pmcd # semodule -X 300 -i my-pmcd.pp Additional Information: Source Context system_u:system_r:init_t:s0 Target Context system_u:object_r:pcp_var_lib_t:s0 Target Objects /var/lib/pcp/pmns/Rebuild [ file ] Source pmcd Source Path pmcd Port <Unknown> Host (removed) Source RPM Packages Target RPM Packages pcp-4.3.2-1.fc29.x86_64 Policy RPM selinux-policy-3.14.2-57.fc29.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 5.0.16-200.fc29.x86_64 #1 SMP Tue May 14 18:27:35 UTC 2019 x86_64 x86_64 Alert Count 6 First Seen 2019-05-15 17:15:39 CEST Last Seen 2019-05-26 19:15:25 CEST Local ID beadd30c-19db-406a-9c72-df893b13e3c4 Raw Audit Messages type=AVC msg=audit(1558890925.736:198): avc: denied { execute } for pid=1614 comm="pmcd" name="Rebuild" dev="dm-3" ino=522357 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:pcp_var_lib_t:s0 tclass=file permissive=0 Hash: pmcd,init_t,pcp_var_lib_t,file,execute Version-Release number of selected component: selinux-policy-3.14.2-57.fc29.noarch Additional info: component: selinux-policy reporter: libreport-2.10.0 hashmarkername: setroubleshoot kernel: 5.0.16-200.fc29.x86_64 type: libreport
Hi Jack, How did you start pmcd? Are you able to reprudice it? Thanks, Lukas.
It happens at system start up after upgrading from Fedora 28 to 29, sorry but I couldn't reproduce it. Sorry Jack
Thanks Jack for the response. Could we close this bug as NOTABUG? Feel free to re-open this ticket if you hit it again. Thanks, Lukas.