Bug 2443788 - avc: denied { create } for pid=1 comm="systemd" name="io.systemd.Hostname" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=lnk_file permissive=0
Summary: avc: denied { create } for pid=1 comm="systemd" name="io.systemd.Hostname"...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: rawhide
Hardware: Unspecified
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Zdenek Pytela
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-03-02 11:45 UTC by Bruno Goncalves
Modified: 2026-03-13 13:28 UTC (History)
7 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2026-03-13 13:28:35 UTC
Type: ---
Embargoed:
zpytela: mirror+

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker FC-3256 0 None None None 2026-03-02 11:49:29 UTC

Description Bruno Goncalves 2026-03-02 11:45:37 UTC 
booting recent Rawhide shows:
avc:  denied  { create } for  pid=1 comm="systemd" name="io.systemd.Login" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=lnk_file permissive=0


type=SERVICE_START msg=audit(1772451766.346:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'^]UID="root" AUID="unset"
type=SERVICE_START msg=audit(1772451766.348:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'^]UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1772451766.348:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'^]UID="root" AUID="unset"
type=AVC msg=audit(1772451766.415:53): avc:  denied  { create } for  pid=1 comm="systemd" name="io.systemd.Hostname" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=lnk_file permissive=0
type=AVC msg=audit(1772451766.418:54): avc:  denied  { create } for  pid=1 comm="systemd" name="io.systemd.Login" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=lnk_file permissive=0



selinux-policy-42.24-1.fc45.noarch
systemd-260~rc1-5.fc45.x86_64


Reproducible: Always
Comment 1 Zdenek Pytela 2026-03-02 11:48:40 UTC 
I cannot find the file path, but:

f45# find /run -name io.systemd.* -type l
/run/varlink/registry/io.systemd.Journal
/run/varlink/registry/io.systemd.Manager
/run/varlink/registry/io.systemd.Unit
/run/user/0/varlink/registry/io.systemd.Manager
/run/user/0/varlink/registry/io.systemd.Unit
/run/user/0/varlink/registry/io.systemd.JournalAccess
/run/user/0/varlink/registry/io.systemd.AskPassword
/run/systemd/userdb/io.systemd.DropIn
/run/systemd/userdb/io.systemd.NameServiceSwitch
f45# rpm -q systemd
systemd-260~rc1-5.fc45.x86_64
Note You need to log in before you can comment on or make changes to this bug.