Description of problem: SELinux is preventing accounts-daemon from 'watch' accesses on the adresář /etc/gdm. ***** Plugin catchall (100. confidence) suggests ************************** Pokud jste přesvědčeni, že má accounts-daemon mít ve výchozím stavu přístup watch na gdm directory. Then měli byste tento problém nahlásit jako chybu. Abyste přístup povolili, můžete vygenerovat lokální modul pravidel. Do prozatím tento přístup povolíte příkazy: # ausearch -c 'accounts-daemon' --raw | audit2allow -M my-accountsdaemon # semodule -X 300 -i my-accountsdaemon.pp Additional Information: Source Context system_u:system_r:accountsd_t:s0 Target Context system_u:object_r:xdm_etc_t:s0 Target Objects /etc/gdm [ dir ] Source accounts-daemon Source Path accounts-daemon Port <Neznámé> Host (removed) Source RPM Packages Target RPM Packages gdm-3.38.2.1-2.fc34.x86_64 SELinux Policy RPM selinux-policy-targeted-3.14.8-1.fc35.noarch Local Policy RPM selinux-policy-targeted-3.14.8-1.fc35.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 5.10.15-200.fc33.x86_64 #1 SMP Wed Feb 10 17:46:55 UTC 2021 x86_64 x86_64 Alert Count 13 First Seen 2021-02-14 22:43:43 CET Last Seen 2021-02-14 22:44:31 CET Local ID 0c91cfbb-0d9b-4e47-8344-8e78ccae73b0 Raw Audit Messages type=AVC msg=audit(1613339071.513:620): avc: denied { watch } for pid=756 comm="gmain" path="/etc/gdm" dev="nvme0n1p3" ino=120164 scontext=system_u:system_r:accountsd_t:s0 tcontext=system_u:object_r:xdm_etc_t:s0 tclass=dir permissive=0 Hash: accounts-daemon,accountsd_t,xdm_etc_t,dir,watch Version-Release number of selected component: selinux-policy-targeted-3.14.8-1.fc35.noarch Additional info: component: selinux-policy reporter: libreport-2.14.0 hashmarkername: setroubleshoot kernel: 5.10.15-200.fc33.x86_64 type: libreport
This is triggered like every 5 seconds :(
true
I am seeing this on RHEL-9 also with selinux-policy-3.14.7-20.el9.noarch
*** This bug has been marked as a duplicate of bug 1928546 ***