Bug 2367184 - SELinux is preventing mail from 'getattr' accesses on the filesystem /dev/shm.
Summary: SELinux is preventing mail from 'getattr' accesses on the filesystem /dev/shm.
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: smartmontools
Version: 42
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Michal Hlavinka
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:b9e04d4c851ec0ca1e9aa1d8602...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-05-19 06:27 UTC by George Petasis
Modified: 2025-09-25 00:15 UTC (History)
10 users (show)

Fixed In Version: smartmontools-7.5-3.fc42 smartmontools-7.5-4.fc44 smartmontools-7.5-3.fc41 smartmontools-7.5-4.fc43
Clone Of:
Environment:
Last Closed: 2025-09-09 00:05:00 UTC
Type: ---
Embargoed:
mhlavink: mirror+


Attachments (Terms of Use)
File: os_info (754 bytes, text/plain)
2025-05-19 06:27 UTC, George Petasis
no flags Details
File: description (1.83 KB, text/plain)
2025-05-19 06:27 UTC, George Petasis
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker FC-1980 0 None None None 2025-08-19 21:41:26 UTC

Description George Petasis 2025-05-19 06:27:43 UTC
Description of problem:
SELinux is preventing mail from 'getattr' accesses on the filesystem /dev/shm.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that mail should be allowed getattr access on the shm filesystem by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'mail' --raw | audit2allow -M my-mail
# semodule -X 300 -i my-mail.pp

Additional Information:
Source Context                system_u:system_r:smartdwarn_t:s0
Target Context                system_u:object_r:tmpfs_t:s0
Target Objects                /dev/shm [ filesystem ]
Source                        mail
Source Path                   mail
Port                          <Άγνωστο>
Host                          (removed)
Source RPM Packages           
Target RPM Packages           
SELinux Policy RPM            selinux-policy-targeted-41.40-1.fc42.noarch
Local Policy RPM              selinux-policy-targeted-41.40-1.fc42.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 6.14.6-300.fc42.x86_64 #1 SMP
                              PREEMPT_DYNAMIC Fri May 9 20:11:19 UTC 2025 x86_64
Alert Count                   30
First Seen                    2025-05-19 06:13:16 EEST
Last Seen                     2025-05-19 09:21:09 EEST
Local ID                      5a472b17-de08-4b9b-8991-b0cfbf9dbcea

Raw Audit Messages
type=AVC msg=audit(1747635669.229:136): avc:  denied  { getattr } for  pid=1649 comm="mail" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:smartdwarn_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=0


Hash: mail,smartdwarn_t,tmpfs_t,filesystem,getattr

Version-Release number of selected component:
selinux-policy-targeted-41.40-1.fc42.noarch

Additional info:
reporter:       libreport-2.17.15
type:           libreport
hashmarkername: setroubleshoot
reason:         SELinux is preventing mail from 'getattr' accesses on the filesystem /dev/shm.
kernel:         6.14.6-300.fc42.x86_64
package:        selinux-policy-targeted-41.40-1.fc42.noarch
component:      selinux-policy
component:      selinux-policy

Comment 1 George Petasis 2025-05-19 06:27:46 UTC
Created attachment 2090757 [details]
File: os_info

Comment 2 George Petasis 2025-05-19 06:27:47 UTC
Created attachment 2090758 [details]
File: description

Comment 3 Zdenek Pytela 2025-05-20 18:17:54 UTC
smartdwarn_t

Comment 4 Fedora Update System 2025-09-08 18:04:27 UTC
FEDORA-2025-c088b2640b (smartmontools-7.5-3.fc42) has been submitted as an update to Fedora 42.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-c088b2640b

Comment 5 Fedora Update System 2025-09-08 22:59:19 UTC
FEDORA-2025-5a68208b3e (smartmontools-7.5-4.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-5a68208b3e

Comment 6 Fedora Update System 2025-09-09 00:05:00 UTC
FEDORA-2025-5a68208b3e (smartmontools-7.5-4.fc44) has been pushed to the Fedora 44 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 7 Fedora Update System 2025-09-09 02:27:20 UTC
FEDORA-2025-c088b2640b has been pushed to the Fedora 42 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-c088b2640b`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-c088b2640b

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 8 Fedora Update System 2025-09-09 10:26:32 UTC
FEDORA-2025-acc76b757e (smartmontools-7.5-4.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-acc76b757e

Comment 9 Fedora Update System 2025-09-09 10:26:36 UTC
FEDORA-2025-7a8bdaf91e (smartmontools-7.5-3.fc41) has been submitted as an update to Fedora 41.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-7a8bdaf91e

Comment 10 Fedora Update System 2025-09-10 00:52:59 UTC
FEDORA-2025-c088b2640b (smartmontools-7.5-3.fc42) has been pushed to the Fedora 42 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 11 Fedora Update System 2025-09-10 01:37:04 UTC
FEDORA-2025-acc76b757e has been pushed to the Fedora 43 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-acc76b757e`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-acc76b757e

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 12 Fedora Update System 2025-09-10 02:41:09 UTC
FEDORA-2025-7a8bdaf91e has been pushed to the Fedora 41 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-7a8bdaf91e`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-7a8bdaf91e

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 13 Fedora Update System 2025-09-14 01:35:15 UTC
FEDORA-2025-7a8bdaf91e (smartmontools-7.5-3.fc41) has been pushed to the Fedora 41 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 14 Fedora Update System 2025-09-25 00:15:55 UTC
FEDORA-2025-acc76b757e (smartmontools-7.5-4.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.