Description of problem: SELinux is preventing (m2-abrmd) from 'execute' accesses on the file /usr/sbin/tpm2-abrmd. ***** Plugin catchall (100. confidence) suggests ************************** If you believe that (m2-abrmd) should be allowed execute access on the tpm2-abrmd file by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c '(m2-abrmd)' --raw | audit2allow -M my-m2abrmd # semodule -X 300 -i my-m2abrmd.pp Additional Information: Source Context system_u:system_r:init_t:s0 Target Context system_u:object_r:unlabeled_t:s0 Target Objects /usr/sbin/tpm2-abrmd [ file ] Source (m2-abrmd) Source Path (m2-abrmd) Port <Unknown> Host (removed) Source RPM Packages Target RPM Packages tpm2-abrmd-2.2.0-2.fc31.x86_64 Policy RPM selinux-policy-3.14.4-40.fc31.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 5.3.11-300.fc31.x86_64 #1 SMP Tue Nov 12 19:08:07 UTC 2019 x86_64 x86_64 Alert Count 181 First Seen 2019-11-24 11:48:40 CET Last Seen 2019-11-24 12:54:08 CET Local ID 485cf086-27e7-4958-b89d-9d2ffcbb210b Raw Audit Messages type=AVC msg=audit(1574596448.336:1173): avc: denied { execute } for pid=10417 comm="(m2-abrmd)" name="tpm2-abrmd" dev="nvme0n1p4" ino=12333010 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:tabrmd_exec_t:s0" Hash: (m2-abrmd),init_t,unlabeled_t,file,execute Version-Release number of selected component: selinux-policy-3.14.4-40.fc31.noarch Additional info: component: selinux-policy reporter: libreport-2.11.3 hashmarkername: setroubleshoot kernel: 5.3.11-300.fc31.x86_64 type: libreport
Hi, Please run command: # restorecon -Rv / TO fix labels on filesystem. It should fix your issue. Closing as NOTABUG.
Similar problem has been detected: Updated f31 to fix SELinux violations from dhclient. What the hell guys, now tpm is broken? hashmarkername: setroubleshoot kernel: 5.3.15-300.fc31.x86_64 package: selinux-policy-3.14.4-43.fc31.noarch reason: SELinux is preventing (m2-abrmd) from 'execute' accesses on the file /usr/sbin/tpm2-abrmd. type: libreport
I get this message when running restorecon -Rv / restorecon: Could not set context for /usr/sbin/tpm2-abrmd: Invalid argument