Description of problem: If I either suspend or hibernate, and then resume, I get 3 setroubleshoot errors as follows (the first two happen during suspend/hibernate, the third during resume) in /var/log/messages (the gold star also appears upon resume): Oct 12 12:45:11 localhost setroubleshoot: SELinux is preventing /sbin/alsactl (alsa_t) "read" to asound.state (etc_runtime_t). For complete SELinux messages. run sealert -l 582650d7-4693-4e2c-8ead-faff20a5a071 Oct 12 12:45:11 localhost setroubleshoot: SELinux is preventing /sbin/alsactl (alsa_t) "write" to asound.state (etc_runtime_t). For complete SELinux messages. run sealert -l 8cc34923-4885-4b43-935f-2b2e36c70431 Oct 12 12:45:37 localhost setroubleshoot: SELinux is preventing /sbin/alsactl (alsa_t) "read" to asound.state (etc_runtime_t). For complete SELinux messages. run sealert -l 582650d7-4693-4e2c-8ead-faff20a5a071 Version-Release number of selected component (if applicable): selinux-policy-2.6.4-46.fc7 How reproducible: always
Created attachment 225801 [details] sealert -l output for one of the "write" errors
Created attachment 225811 [details] sealert -l output for one of the "read" errors
Does restorecon -V /etc/asound.state fix the problem?
[root@localhost ~]# restorecon -V /etc/asound.state restorecon: invalid option -- V usage: restorecon [-iFnrRv] [-e excludedir ] [-o filename ] [-f filename | pathname... ] [root@localhost ~]#
Make that -v
After issuing the command, the problem still exists after a suspend. [root@localhost ~]# grep setroubleshoot /var/log/messages Oct 15 13:45:41 localhost setroubleshoot: SELinux is preventing /sbin/alsactl (alsa_t) "read" to asound.state (etc_runtime_t). For complete SELinux messages. run sealert -l 582650d7-4693-4e2c-8ead-faff20a5a071 Oct 15 13:45:41 localhost setroubleshoot: SELinux is preventing /sbin/alsactl (alsa_t) "write" to asound.state (etc_runtime_t). For complete SELinux messages. run sealert -l 8cc34923-4885-4b43-935f-2b2e36c70431 Oct 15 13:46:07 localhost setroubleshoot: SELinux is preventing /sbin/alsactl (alsa_t) "read" to asound.state (etc_runtime_t). For complete SELinux messages. run sealert -l 582650d7-4693-4e2c-8ead-faff20a5a071 [root@localhost ~]#
Ok can you try selinux-policy-2.6.4-48.fc7 In fedora-testing, I just requested that this be pushed to stable.
Updating selinux-policy and selinux-policy-targeted to the updates-testing versions (2.6.4-48.fc7) fixes the problem, both for suspend and hibernate. Thanks for the quick fix.
Also fixed with selinux-policy*-2.6.4-48.fc7 from updates-released. Closing.