Description of problem:
SELinux is preventing key.dns_resolve from 'read' accesses on the soubor /etc/hosts.

*****  Plugin catchall (100. confidence) suggests   **************************

Pokud jste přesvědčeni, že má key.dns_resolve mít ve výchozím stavu přístup read na hosts file.
Then měli byste tento problém nahlásit jako chybu.
Abyste přístup povolili, můžete vygenerovat lokální modul pravidel.
Do
prozatím tento přístup povolíte příkazy:
# ausearch -c 'key.dns_resolve' --raw | audit2allow -M my-keydnsresolve
# semodule -X 300 -i my-keydnsresolve.pp

Additional Information:
Source Context                system_u:system_r:keyutils_request_t:s0
Target Context                system_u:object_r:net_conf_t:s0
Target Objects                /etc/hosts [ file ]
Source                        key.dns_resolve
Source Path                   key.dns_resolve
Port                          <Neznámé>
Host                          (removed)
Source RPM Packages           
Target RPM Packages           setup-2.14.3-2.fc38.noarch
SELinux Policy RPM            selinux-policy-targeted-38.12-1.fc38.noarch
Local Policy RPM              selinux-policy-targeted-38.12-1.fc38.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 6.2.15-300.fc38.x86_64 #1 SMP
                              PREEMPT_DYNAMIC Thu May 11 17:37:39 UTC 2023
                              x86_64
Alert Count                   1
First Seen                    2023-05-24 13:32:00 CEST
Last Seen                     2023-05-24 13:32:00 CEST
Local ID                      021677a3-deb0-47c2-992c-3fc87119bacc

Raw Audit Messages
type=AVC msg=audit(1684927920.668:23501): avc:  denied  { read } for  pid=278329 comm="key.dns_resolve" name="hosts" dev="dm-0" ino=527044 scontext=system_u:system_r:keyutils_request_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=0


Hash: key.dns_resolve,keyutils_request_t,net_conf_t,file,read

Version-Release number of selected component:
selinux-policy-targeted-38.12-1.fc38.noarch

Additional info:
reporter:       libreport-2.17.10
component:      selinux-policy
kernel:         6.2.15-300.fc38.x86_64
hashmarkername: setroubleshoot
reason:         SELinux is preventing key.dns_resolve from 'read' accesses on the soubor /etc/hosts.
package:        selinux-policy-targeted-38.12-1.fc38.noarch
type:           libreport
component:      selinux-policy