Bug 387541 - SELinux is preventing /usr/sbin/restorecond (restorecond_t) "write" to pipe:[576122] (rpm_t).
Summary: SELinux is preventing /usr/sbin/restorecond (restorecond_t) "write" to pipe:[...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted
Version: 7
Hardware: x86_64
OS: Linux
low
low
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact: Ben Levenson
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-11-16 19:48 UTC by Andrig Miller
Modified: 2008-01-30 19:05 UTC (History)
0 users

Fixed In Version: Current
Clone Of:
Environment:
Last Closed: 2008-01-30 19:05:55 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
A screen shot with the SE Trouble Shoot information for the AVC Denied. (632.60 KB, image/png)
2007-11-16 19:48 UTC, Andrig Miller
no flags Details

Description Andrig Miller 2007-11-16 19:48:27 UTC
Description of problem:

SELinux is not allowing /usr/sbin/restorecond to write to a pipe.  This happens
at the end of using PUP to apply updates from the Fedora repository.

Version-Release number of selected component (if applicable):

2.6.4-49.fc7

How reproducible:

Everytime.

Steps to Reproduce:
1. Apply updates through PUP.
2.
3.
  
Actual results:

I get a pop-up from setroubshoot that says AVC Denied.

Expected results:

Shouldn't get an AVC denied.

Additional info:

I have attached a screen shot of the SE Troubleshoot information.

Comment 1 Andrig Miller 2007-11-16 19:48:28 UTC
Created attachment 261751 [details]
A screen shot with the SE Trouble Shoot information for the AVC Denied.

Comment 2 Daniel Walsh 2007-11-17 11:58:18 UTC
This avc can safely be ignored.  It will be dontaudited in the next version or
selinux policy

Fixed in selinux-policy-2.6.4-58.fc7

Comment 3 Daniel Walsh 2008-01-30 19:05:55 UTC
Bulk closing a old selinux policy bugs that were in the modified state.  If the
bug is still not fixed.  Please reopen.


Note You need to log in before you can comment on or make changes to this bug.