Fedora Account System
Red Hat Associate
Red Hat Customer
Description of problem: SELinux troubleshooter notified me of this. From the names involved, it sounds like something that shouldn't happen. SELinux is preventing tuned-ppd from 'create' accesses on the file ppd_base_profile. ***** Plugin catchall (100. confidence) suggests ************************** If you believe that tuned-ppd should be allowed create access on the ppd_base_profile file by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'tuned-ppd' --raw | audit2allow -M my-tunedppd # semodule -X 300 -i my-tunedppd.pp Additional Information: Source Context system_u:system_r:tuned_ppd_t:s0 Target Context system_u:object_r:tuned_etc_t:s0 Target Objects ppd_base_profile [ file ] Source tuned-ppd Source Path tuned-ppd Port <Unknown> Host (removed) Source RPM Packages Target RPM Packages SELinux Policy RPM selinux-policy-targeted-41.37-1.fc42.noarch Local Policy RPM selinux-policy-targeted-41.37-1.fc42.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 6.14.2-300.fc42.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Apr 10 21:50:55 UTC 2025 x86_64 Alert Count 6 First Seen 2025-04-17 13:27:39 CEST Last Seen 2025-04-21 10:25:22 CEST Local ID 7bd48478-fee1-41b6-9807-f1627ae5457d Raw Audit Messages type=AVC msg=audit(1745223922.767:1726): avc: denied { create } for pid=1250 comm="tuned-ppd" name="ppd_base_profile" scontext=system_u:system_r:tuned_ppd_t:s0 tcontext=system_u:object_r:tuned_etc_t:s0 tclass=file permissive=1 Hash: tuned-ppd,tuned_ppd_t,tuned_etc_t,file,create Version-Release number of selected component: selinux-policy-targeted-41.37-1.fc42.noarch Additional info: reporter: libreport-2.17.15 reason: SELinux is preventing tuned-ppd from 'create' accesses on the file ppd_base_profile. package: selinux-policy-targeted-41.37-1.fc42.noarch component: selinux-policy hashmarkername: setroubleshoot type: libreport kernel: 6.14.2-300.fc42.x86_64 comment: SELinux troubleshooter notified me of this. From the names involved, it sounds like something that shouldn't happen. component: selinux-policy
Created attachment 2086135 [details] File: description
Created attachment 2086136 [details] File: os_info
Hi, Will you be able to test the coprbuild from https://github.com/fedora-selinux/selinux-policy/pull/2679 -> checks?
Thanks, Zdenek. I've installed the copr repo and will see if this fixes the issue. I plan to let you know later this week if it's working.
FEDORA-2025-5e64167ac4 (selinux-policy-41.40-1.fc42) has been submitted as an update to Fedora 42. https://bodhi.fedoraproject.org/updates/FEDORA-2025-5e64167ac4
FEDORA-2025-5e64167ac4 has been pushed to the Fedora 42 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-5e64167ac4` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-5e64167ac4 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2025-5e64167ac4 (selinux-policy-41.40-1.fc42) has been pushed to the Fedora 42 stable repository. If problem still persists, please make note of it in this bug report.
*** Bug 2367711 has been marked as a duplicate of this bug. ***