Bug 1759932 - [Fedora-31][selinux-policy] avc: denied { read } for pid=46110 comm="groupadd"
Summary: [Fedora-31][selinux-policy] avc: denied { read } for pid=46110 comm="group...
Keywords:
Status: CLOSED DUPLICATE of bug 1754219
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 31
Hardware: aarch64
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Lukas Vrabec
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-10-09 12:49 UTC by PaulB
Modified: 2019-10-10 07:09 UTC (History)
5 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2019-10-10 07:09:59 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description PaulB 2019-10-09 12:49:14 UTC
Description of problem:
The following issue is seen with Fedora-31-20191005.n.0 installed:
 Fedora-31-20191005.n.0

Version-Release number of selected component (if applicable):
distro: Fedora-31-20191005.n.0
kernel: 5.3.2-300.fc31.aarch64
selinux-policy: selinux-policy-3.14.4-35.fc31.noarch

How reproducible:
 100%


Steps to Reproduce:
1. Install aarch64 system with Fedora-31-20191005.n.0
2.


Actual results:
https://beaker.engineering.redhat.com/jobs/3829243
http://beaker-archive.host.prod.eng.bos.redhat.com/beaker-logs/2019/10/38292/3829243/7443735/100468719/462180333/avc.log
---<-snip->---
type=AVC msg=audit(1570482971.642:136): avc:  denied  { read } for  pid=32885 comm="groupadd" path="pipe:[2889]" dev="pipefs" ino=2889 scontext=system_u:system_r:groupadd_t:s0 tcontext=system_u:system_r:unconfined_service_t:s0 tclass=fifo_file permissive=0
---<-snip->---


Expected results:
No "avc:  denied" messages are expected.


Additional info:

Comment 1 PaulB 2019-10-09 12:50:23 UTC
All,
Here is a reproducer:
distro: Fedora-31-20191005.n.0
kernel: 5.3.2-300.fc31.aarch64
selinux-policy: selinux-policy-3.14.4-35.fc31.noarch

https://beaker.engineering.redhat.com/jobs/3829400
http://beaker-archive.host.prod.eng.bos.redhat.com/beaker-logs/2019/10/38294/3829400/7444007/100470967/462192616/avc.log
---<-snip->---
type=AVC msg=audit(1570487176.575:146): avc:  denied  { read } for  pid=39718 comm="groupadd" path="pipe:[76914]" dev="pipefs" ino=76914 scontext=system_u:system_r:groupadd_t:s0 tcontext=system_u:system_r:unconfined_service_t:s0 tclass=fifo_file permissive=0
---<-snip->---

Best,
-pbunyan

Comment 2 Lukas Vrabec 2019-10-10 07:09:59 UTC

*** This bug has been marked as a duplicate of bug 1754219 ***


Note You need to log in before you can comment on or make changes to this bug.