Bug 2388133 - SELinux avc: denied { getattr } for pid=1769889 comm="mail" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=0
Summary: SELinux avc: denied { getattr } for pid=1769889 comm="mail" name="/" dev="...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 42
Hardware: x86_64
OS: Linux
low
medium
Target Milestone: ---
Assignee: Zdenek Pytela
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-08-13 00:03 UTC by Anthony Messina
Modified: 2025-10-10 00:50 UTC (History)
7 users (show)

Fixed In Version: selinux-policy-42.12-1.fc42
Clone Of:
Environment:
Last Closed: 2025-10-10 00:50:39 UTC
Type: ---
Embargoed:
zpytela: mirror+

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github fedora-selinux selinux-policy pull 2887 0 None open Allow apcupsd get attributes of the /dev/shm filesystem 2025-09-24 14:47:36 UTC
Red Hat Issue Tracker FC-2066 0 None None None 2025-08-27 15:51:12 UTC

Description Anthony Messina 2025-08-13 00:03:55 UTC 
When apcupsd is triggered to send mail (on a power failure, connection loss, or resume of connection), the following AVC is triggered.

Note that the email is sent, so perhaps an upstream fix is needed, or this may be a good candidate for "dontaudit"

avc:  denied  { getattr } for  pid=1769889 comm="mail" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=0

Reproducible: Always
Comment 1 Fedora Update System 2025-10-05 19:49:50 UTC 
FEDORA-2025-586ab05666 (selinux-policy-42.12-1.fc42) has been submitted as an update to Fedora 42.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-586ab05666
Comment 2 Fedora Update System 2025-10-06 01:51:47 UTC 
FEDORA-2025-586ab05666 has been pushed to the Fedora 42 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-586ab05666`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-586ab05666

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 3 Fedora Update System 2025-10-10 00:50:39 UTC 
FEDORA-2025-586ab05666 (selinux-policy-42.12-1.fc42) has been pushed to the Fedora 42 stable repository.
If problem still persists, please make note of it in this bug report.
Note You need to log in before you can comment on or make changes to this bug.