Description of problem: The following attached avc's for tmpwatch against tex, dvips, pdftex where noted on a F9Preview fresh install. Version-Release number of selected component (if applicable): selinux-policy-3.3.1-35.fc9.noarch selinux-policy-targeted-3.3.1-35.fc9.noarch texlive-2007-28.fc9.i386 texlive-texmf-dvips-2007-20.fc9.noarch texlive-texmf-fonts-2007-20.fc9.noarch How reproducible: Tried running cron.daily scripts to check wheich one, but didn't regenerate the avc. Steps to Reproduce: 1. f9preview install {default selections} 2. boot it. 3. after 92mins, Actual results: the 3x avc's are noted. Expected results: - Additional info: since updated to koji: selinux-policy-3.3.1-36.fc9.noarch selinux-policy-targeted-3.3.1-36.fc9.noarch haven't been able to reproduce since initial boot.
Created attachment 303040 [details] 1 of 3 avc's against dvips
Created attachment 303041 [details] 2 of 3 avc's against pdftex
Created attachment 303042 [details] 3 of 3 avc's against tex
This is caused by texlive not fixing the labeling of this directory in its post install. It needs to run restorecon -R -v /var/lib/texmf. If you run this command you will fix the labeling.
type=AVC msg=audit(1209562776.598:28): avc: denied { setattr } for pid=7428 comm="tmpwatch" name="dvips" dev=dm-2 ino=2965586 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir type=AVC msg=audit(1209562776.598:29): avc: denied { setattr } for pid=7428 comm="tmpwatch" name="pdftex" dev=dm-2 ino=2965587 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir confirmed
Should be fixed by #444922.