Description of problem: This alert started happeniing as soon as the system was rebooted after setroubleshoot was installed. installing setrouble shhot was the only change made to the system after the WS Bets 0214 was installed. This is on a bare metal system. SELinux is preventing dbus-daemon from 'watch' accesses on the directory /etc/dbus-1/session.d. ***** Plugin catchall (100. confidence) suggests ************************** If you believe that dbus-daemon should be allowed watch access on the session.d directory by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'dbus-daemon' --raw | audit2allow -M my-dbusdaemon # semodule -X 300 -i my-dbusdaemon.pp Additional Information: Source Context system_u:system_r:xdm_t:s0-s0:c0.c1023 Target Context system_u:object_r:dbusd_etc_t:s0 Target Objects /etc/dbus-1/session.d [ dir ] Source dbus-daemon Source Path dbus-daemon Port <Unknown> Host (removed) Source RPM Packages Target RPM Packages dbus-common-1.12.20-3.fc34.noarch SELinux Policy RPM selinux-policy-targeted-3.14.7-20.fc34.noarch Local Policy RPM selinux-policy-targeted-3.14.7-20.fc34.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 5.11.0-0.rc7.149.fc34.x86_64 #1 SMP Mon Feb 8 16:23:47 UTC 2021 x86_64 x86_64 Alert Count 1 First Seen 2021-02-14 16:10:18 EST Last Seen 2021-02-14 16:10:18 EST Local ID cc63553a-d47d-49b3-bfd1-11027a848fe4 Raw Audit Messages type=AVC msg=audit(1613337018.873:591): avc: denied { watch } for pid=1001 comm="dbus-daemon" path="/etc/dbus-1/session.d" dev="sda2" ino=619 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dbusd_etc_t:s0 tclass=dir permissive=0 Hash: dbus-daemon,xdm_t,dbusd_etc_t,dir,watch Version-Release number of selected component: selinux-policy-targeted-3.14.7-20.fc34.noarch Additional info: component: selinux-policy reporter: libreport-2.14.0 hashmarkername: setroubleshoot kernel: 5.11.0-0.rc7.149.fc34.x86_64 type: libreport Potential duplicate: bug 1928547
Similar problem has been detected: This alert started happeniing as soon as the system was rebooted after setroubleshoot was installed. Installing setrouble shoot was the only change made to the system after the WS Bets 0214 was installed. This is on a bare metal system. hashmarkername: setroubleshoot kernel: 5.11.0-0.rc7.149.fc34.x86_64 package: selinux-policy-targeted-3.14.7-20.fc34.noarch reason: SELinux is preventing dbus-daemon from 'watch' accesses on the directory /etc/dbus-1/session.d. type: libreport
*** This bug has been marked as a duplicate of bug 1928547 ***