Bug 2251042 - AVC on dnf actions: denied { map_read map_write } for comm=mandb
Summary: AVC on dnf actions: denied { map_read map_write } for comm=mandb
Keywords:
Status: CLOSED DUPLICATE of bug 2250930
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: rawhide
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Zdenek Pytela
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-11-22 14:20 UTC by Andrei Stepanov
Modified: 2023-11-22 16:12 UTC (History)
8 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2023-11-22 16:12:04 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Andrei Stepanov 2023-11-22 14:20:06 UTC 
Hello,

Fedora CI started to fail on multiply new builds on DNF actions: install/uninstall RPMS:

It fails because selinux files AVC:

[root@ip-172-31-20-75 mtps-logs]# cat FAIL-selinux-135535-install-anaconda-webui-0\:1-1.fc40.noarch.log 
----
type=AVC msg=audit(11/22/2023 13:56:20.407:928) : avc:  denied  { map_read map_write } for  pid=4163 comm=mandb scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=bpf permissive=0 


# rpm -qa | grep selinux
libselinux-3.6-0.rc1.1.fc40.x86_64
libselinux-utils-3.6-0.rc1.1.fc40.x86_64
python3-libselinux-3.6-0.rc1.1.fc40.x86_64
selinux-policy-40.5-1.fc40.noarch
selinux-policy-targeted-40.5-1.fc40.noarch
rpm-plugin-selinux-4.19.0-2.fc40.x86_64


Reproducible: Always

Steps to Reproduce:
1. Install with dnf install some rpm package
2.
3.
Comment 1 Zdenek Pytela 2023-11-22 16:12:04 UTC 

*** This bug has been marked as a duplicate of bug 2250930 ***
Note You need to log in before you can comment on or make changes to this bug.