Fedora Account System
Red Hat Associate
Red Hat Customer
Additional Information: Source Context system_u:system_r:iiosensorproxy_t:s0 Target Context system_u:system_r:kernel_t:s0 Target Objects /systemd/journal/socket [ unix_dgram_socket ] Source iio-sensor-prox Source Path iio-sensor-prox Port <Unknown> Host (removed) Source RPM Packages Target RPM Packages SELinux Policy RPM selinux-policy-targeted-41.36-1.fc42.noarch Local Policy RPM selinux-policy-targeted-41.36-1.fc42.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 6.14.2-300.fc42.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Apr 10 21:50:55 UTC 2025 x86_64 Alert Count 8 First Seen 2025-04-17 03:01:48 EEST Last Seen 2025-04-18 21:31:32 EEST Local ID 44fe3060-74a0-4e3d-8237-e04bd7335142 Raw Audit Messages type=AVC msg=audit(1745001092.22:111): avc: denied { sendto } for pid=815 comm="iio-sensor-prox" path="/systemd/journal/socket" scontext=system_u:system_r:iiosensorproxy_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=0 Hash: iio-sensor-prox,iiosensorproxy_t,kernel_t,unix_dgram_socket,sendto Reproducible: Always Steps to Reproduce: I don't know. The message just shows up in my SEL Alert browser. Actual Results: SELinux blocks unix socket access for iio_sensor_proxy, creating an alert Expected Results: no alert?
FEDORA-2025-f9f097f491 (selinux-policy-41.43-1.fc42) has been submitted as an update to Fedora 42. https://bodhi.fedoraproject.org/updates/FEDORA-2025-f9f097f491
FEDORA-2025-f9f097f491 has been pushed to the Fedora 42 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-f9f097f491` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-f9f097f491 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2025-f9f097f491 (selinux-policy-41.43-1.fc42) has been pushed to the Fedora 42 stable repository. If problem still persists, please make note of it in this bug report.