Bug 1900234 - I can't launch gnome-terminal as a staff_u user
Summary: I can't launch gnome-terminal as a staff_u user
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 34
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
Assignee: Zdenek Pytela
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1767779
TreeView+ depends on / blocked
 
Reported: 2020-11-21 16:32 UTC by Carl G.
Modified: 2021-12-23 14:01 UTC (History)
9 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2021-12-23 14:01:48 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Carl G. 2020-11-21 16:32:36 UTC
Description of problem:

I can't launch gnome-terminal as a staff_u user

type=AVC msg=audit(1605974596.409:758): avc:  denied  { read } for  pid=1430 comm="systemd" name="99-uresourced.conf" dev="tmpfs" ino=1651 scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 tcontext=system_u:object_r:init_var_run_t:s0 tclass=file permissive=0

type=AVC msg=audit(1605974596.326:757): avc:  denied  { create } for  pid=1430 comm="systemd" name="chr" scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_tmp_t:s0 tclass=chr_file permissive=0

audit2allow:
#============= staff_t ==============
allow staff_t init_var_run_t:file read;
allow staff_t user_tmp_t:chr_file create;

Comment 1 Ben Cotton 2021-02-09 16:24:20 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 34 development cycle.
Changing version to 34.

Comment 2 Zdenek Pytela 2021-12-23 14:01:48 UTC
These denials do not seem to pop up in current distribution.


Note You need to log in before you can comment on or make changes to this bug.