Description of problem: SELinux is preventing key.dns_resolve from 'view' accesses on the key Sconosciuto. ***** Plugin catchall (100. confidence) suggests ************************** Se ci credi key.dns_resolve dovrebbe essere consentito view accesso al Sconosciuto key per impostazione predefinita. Then si dovrebbe riportare il problema come bug. E' possibile generare un modulo di politica locale per consentire questo accesso. Do consentire questo accesso per ora eseguendo: # ausearch -c 'key.dns_resolve' --raw | audit2allow -M my-$MODULE_NOME # semodule -X 300 -i miei-keydnsresolve.pp Additional Information: Source Context system_u:system_r:keyutils_dns_resolver_t:s0 Target Context system_u:system_r:kernel_t:s0 Target Objects Sconosciuto [ key ] Source key.dns_resolve Source Path key.dns_resolve Port <Sconosciuto> Host (removed) Source RPM Packages Target RPM Packages SELinux Policy RPM selinux-policy-targeted-38.15-1.fc38.noarch Local Policy RPM selinux-policy-targeted-38.15-1.fc38.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Host Name (removed) Platform Linux (removed) 6.3.6-200.fc38.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 5 15:45:04 UTC 2023 x86_64 Alert Count 1 First Seen 2023-06-11 18:48:55 CEST Last Seen 2023-06-11 18:48:55 CEST Local ID 960e39dc-f509-4e4d-a982-38fa5c774d31 Raw Audit Messages type=AVC msg=audit(1686502135.330:245): avc: denied { view } for pid=3276 comm="key.dns_resolve" scontext=system_u:system_r:keyutils_dns_resolver_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=key permissive=1 Hash: key.dns_resolve,keyutils_dns_resolver_t,kernel_t,key,view Version-Release number of selected component: selinux-policy-targeted-38.15-1.fc38.noarch Additional info: reporter: libreport-2.17.10 reason: SELinux is preventing key.dns_resolve from 'view' accesses on the key Sconosciuto. package: selinux-policy-targeted-38.15-1.fc38.noarch component: selinux-policy hashmarkername: setroubleshoot type: libreport kernel: 6.3.6-200.fc38.x86_64 component: selinux-policy
Created attachment 1970308 [details] File: description
Created attachment 1970309 [details] File: os_info
*** Bug 2214074 has been marked as a duplicate of this bug. ***
FEDORA-2023-9050c32c92 has been submitted as an update to Fedora 38. https://bodhi.fedoraproject.org/updates/FEDORA-2023-9050c32c92
FEDORA-2023-9050c32c92 has been pushed to the Fedora 38 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-9050c32c92` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2023-9050c32c92 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2023-9050c32c92 has been pushed to the Fedora 38 stable repository. If problem still persists, please make note of it in this bug report.
*** Bug 2214082 has been marked as a duplicate of this bug. ***