While running gcc testsuite after update to glibc, SELINUX gives error preventing pt_chown because of attempt to use mmap_zero node=quattro.localdomain type=AVC msg=audit(1250222756.953:83): avc: denied { mmap_zero } for pid=4939 comm="pt_chown" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=memprotect The pid-4939 belongs to 'expect' running as part of gcc testsuite. See initial report in #515521 Comment 27 which shows the full alert message. Workaround is the fix to devpts discussed in that bug report.
I don't think this should need this. Jery can you get the entire message out of the audit log ausearch -m avc -i
it absolutely does not need this permission, with the full syscall we might find it to be the problem in which a full vm space can try to allocate between 4096 and mmap_min_addr dynamically (prelink was hitting that before we turned mmap_min_addr down to 4096). This is still a problem in the upstream vm. I can verify with the full audit message.
Created attachment 357503 [details] Requested output from ausearch -m avc -i I am reproducing this on another machine. Again while running gcc testsuite. Atacched audit as requested
This is a bug in libcap. capget(0x20080522, 0, NULL) = -1 EFAULT (Bad address)
*** Bug 524369 has been marked as a duplicate of this bug. ***
*** Bug 525309 has been marked as a duplicate of this bug. ***
*** This bug has been marked as a duplicate of bug 525537 ***