Description of problem: # systemctl stop ModemManager # rfkill unblock bluetooth # sleep 1 # systemctl start bluetooth # hciconfig hci0 up # rfcomm bind /dev/rfcomm0 "$BTADDR" 2 # sleep 1 # socat /dev/rfcomm0 stdout Blueman was running. After disconnection from the rfcomm rhis AVC was trigerred multiple times. SELinux is preventing ps from 'getattr' accesses on the adresář /proc/<pid>. ***** Plugin catchall (100. confidence) suggests ************************** Pokud jste přesvědčeni, že má ps mít ve výchozím stavu přístup getattr na <pid> directory. Then měli byste tento problém nahlásit jako chybu. Abyste přístup povolili, můžete vygenerovat lokální modul pravidel. Do prozatím tento přístup povolíte příkazy: # ausearch -c 'ps' --raw | audit2allow -M my-ps # semodule -X 300 -i my-ps.pp Additional Information: Source Context system_u:system_r:blueman_t:s0 Target Context system_u:system_r:kernel_t:s0 Target Objects /proc/<pid> [ dir ] Source ps Source Path ps Port <Neznámé> Host (removed) Source RPM Packages Target RPM Packages Policy RPM selinux-policy-3.14.2-60.fc29.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 5.1.20-200.fc29.x86_64 #1 SMP Fri Jul 26 15:15:46 UTC 2019 x86_64 x86_64 Alert Count 588 First Seen 2019-08-04 12:08:34 CEST Last Seen 2019-08-04 13:19:00 CEST Local ID 51e83564-10fc-4f66-98c3-5a7603992c34 Raw Audit Messages type=AVC msg=audit(1564917540.700:1299): avc: denied { getattr } for pid=7246 comm="ps" path="/proc/7233" dev="proc" ino=118626 scontext=system_u:system_r:blueman_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Hash: ps,blueman_t,kernel_t,dir,getattr Version-Release number of selected component: selinux-policy-3.14.2-60.fc29.noarch Additional info: component: selinux-policy reporter: libreport-2.10.1 hashmarkername: setroubleshoot kernel: 5.1.20-200.fc29.x86_64 type: libreport
commit 0832571cdfbe097df040e3dd96aef7dd0594269a Author: Lukas Vrabec <lvrabec> Date: Mon Jul 1 20:55:42 2019 +0200 Dontaudit blueman to read state of all domains on system BZ(1722696)
FEDORA-2019-b51794f502 has been submitted as an update to Fedora 29. https://bodhi.fedoraproject.org/updates/FEDORA-2019-b51794f502
selinux-policy-3.14.2-64.fc29 has been pushed to the Fedora 29 stable repository. If problems still persist, please make note of it in this bug report.