Bug 246272 - avc denied {write} for comm="vgs" / comm="vgchange"
avc denied {write} for comm="vgs" / comm="vgchange"
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: lvm2 (Show other bugs)
All Linux
low Severity low
: ---
: ---
Assigned To: Milan Broz
Corey Marthaler
: Regression, Reopened
: 241554 356351 (view as bug list)
Depends On:
  Show dependency treegraph
Reported: 2007-06-29 14:31 EDT by Alexander Todorov
Modified: 2013-02-28 23:05 EST (History)
11 users (show)

See Also:
Fixed In Version: RHBA-2007-0516
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2007-11-07 11:49:16 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Comment 6 Daniel Walsh 2007-07-02 16:24:16 EDT
Ok the problem here is that the directory /etc/lvm/cache is not defined in the
spec file so it does not get created by default, but only gets created when the
first lvm app runs.  This is not allowed by selinux policy.  This directory
should be created by the spec file, so it gets cleaned up correctly when the rpm
gets removed.  So I am reassigning this to lvm.

We tested this by making the directory and then rebooting.  AVC disappears.
Comment 10 Alexander Todorov 2007-08-29 08:34:09 EDT
not seeing this issue with lvm2-2.02.26-3.el5.
moving to VERIFIED
Comment 12 errata-xmlrpc 2007-11-07 11:49:16 EST
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

Comment 13 Alasdair Kergon 2007-11-21 14:15:00 EST
*** Bug 241554 has been marked as a duplicate of this bug. ***
Comment 14 Milan Broz 2008-01-04 08:17:39 EST
*** Bug 356351 has been marked as a duplicate of this bug. ***

Note You need to log in before you can comment on or make changes to this bug.