Description of problem: Just woke up to my poor dead machine. SELinux is preventing systemctl from 'getattr' accesses on the filesystem /proc. ***** Plugin catchall (100. confidence) suggests ************************** If you believe that systemctl should be allowed getattr access on the proc filesystem by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'systemctl' --raw | audit2allow -M my-systemctl # semodule -X 300 -i my-systemctl.pp Additional Information: Source Context system_u:system_r:cockpit_ws_t:s0 Target Context system_u:object_r:proc_t:s0 Target Objects /proc [ filesystem ] Source systemctl Source Path systemctl Port <Unknown> Host (removed) Source RPM Packages Target RPM Packages filesystem-3.14-4.fc34.x86_64 SELinux Policy RPM selinux-policy-targeted-3.14.7-13.fc34.noarch Local Policy RPM selinux-policy-targeted-3.14.7-13.fc34.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 5.10.0-0.rc6.20201204git34816d20f1 73.92.fc34.x86_64 #1 SMP Fri Dec 4 13:56:15 UTC 2020 x86_64 x86_64 Alert Count 84 First Seen 2020-12-15 10:26:39 CST Last Seen 2020-12-29 07:11:44 CST Local ID 49ade364-aa2a-49ce-a177-66d1ca946778 Raw Audit Messages type=AVC msg=audit(1609247504.357:530): avc: denied { getattr } for pid=848 comm="systemctl" name="/" dev="proc" ino=1 scontext=system_u:system_r:cockpit_ws_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=filesystem permissive=0 Hash: systemctl,cockpit_ws_t,proc_t,filesystem,getattr Version-Release number of selected component: selinux-policy-targeted-3.14.7-13.fc34.noarch Additional info: component: selinux-policy reporter: libreport-2.14.0 hashmarkername: setroubleshoot kernel: 5.10.0-0.rc6.20201204git34816d20f173.92.fc34.x86_64 type: libreport
Created attachment 1742916 [details] File: Newsletter Autistici Inventati 2020.eml
Similar problem has been detected: All I know is on this machine I can not get cockpit-dashboard from either Cockpit or Terminal or dnfdragora. The dnfdragora GUI is too big for my screen and can not be resized in Cinnamon to be of use so I just installed Fluxbof and XFCE in high hopes I can get cockpit-dashboard whiched showed up in dnfdragora in my Cinnamon but could not pull the tigger because the buttons are somewhere way down below and untouchable. Apparently cockpit-dashboard is missing from the Fedora-Everything repos. But why it shows up in dnfdragora I dunno? On my other machine spinning the same system cockpit-dashboard is installed and appears as installed and current in dnfdragora and works in Cockpit. hashmarkername: setroubleshoot kernel: 5.10.0-0.rc6.20201204git34816d20f173.92.fc34.x86_64 package: selinux-policy-targeted-3.14.7-13.fc34.noarch reason: SELinux is preventing systemctl from 'getattr' accesses on the filesystem /proc. type: libreport
*** This bug has been marked as a duplicate of bug 1892401 ***