Description of problem: It is hapening continuously since I upgraded Fedora from 37 to 38 I tried repeatedly to implement the two solutions offered by the SELinux troubleshooter It did not work. SELinux is preventing key.dns_resolve from 'map' accesses on the arquivo /usr/sbin/key.dns_resolver. ***** Plugin catchall_boolean (89.3 confidence) suggests ****************** Se você quiser allow any process to mmap any file on system with attribute file_type. Then você deve informar o SELinux sobre isso habilitando o booleano 'domain_can_mmap_files'. Do setsebool -P domain_can_mmap_files 1 ***** Plugin catchall (11.6 confidence) suggests ************************** Se você acredita nisso key.dns_resolve deve ser permitido map acesso no key.dns_resolver file por padrão. Then você deve informar que este é um erro. Você pode gerar um módulo de política local para permitir este acesso. Do permitir este acesso por agora executando: # ausearch -c 'key.dns_resolve' --raw | audit2allow -M my-keydnsresolve # semodule -X 300 -i my-keydnsresolve.pp Additional Information: Source Context system_u:system_r:keyutils_request_t:s0 Target Context system_u:object_r:bin_t:s0 Target Objects /usr/sbin/key.dns_resolver [ file ] Source key.dns_resolve Source Path key.dns_resolve Port <Desconhecido> Host (removed) Source RPM Packages Target RPM Packages keyutils-1.6.1-6.fc38.x86_64 SELinux Policy RPM selinux-policy-targeted-38.12-1.fc38.noarch Local Policy RPM selinux-policy-targeted-38.12-1.fc38.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 6.2.15-300.fc38.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 11 17:37:39 UTC 2023 x86_64 Alert Count 115 First Seen 2023-05-15 12:13:17 -03 Last Seen 2023-05-17 17:53:46 -03 Local ID a8a955f9-6247-47b7-b568-b55cd817c7ef Raw Audit Messages type=AVC msg=audit(1684356826.908:690): avc: denied { map } for pid=11729 comm="key.dns_resolve" path="/usr/sbin/key.dns_resolver" dev="dm-0" ino=67914968 scontext=system_u:system_r:keyutils_request_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=0 Hash: key.dns_resolve,keyutils_request_t,bin_t,file,map Version-Release number of selected component: selinux-policy-targeted-38.12-1.fc38.noarch Additional info: reporter: libreport-2.17.10 type: libreport kernel: 6.2.15-300.fc38.x86_64 reason: SELinux is preventing key.dns_resolve from 'map' accesses on the arquivo /usr/sbin/key.dns_resolver. component: selinux-policy hashmarkername: setroubleshoot package: selinux-policy-targeted-38.12-1.fc38.noarch component: selinux-policy
Created attachment 1965256 [details] File: description
Created attachment 1965257 [details] File: os_info
*** This bug has been marked as a duplicate of bug 2182643 ***