Bug 838703 - /usr/sbin/tmpwatch setattr access on the directory kdecache-root.
/usr/sbin/tmpwatch setattr access on the directory kdecache-root.
Status: CLOSED DUPLICATE of bug 836262
Product: Fedora
Classification: Fedora
Component: selinux-policy (Show other bugs)
Unspecified Unspecified
unspecified Severity unspecified
: ---
: ---
Assigned To: Miroslav Grepl
Fedora Extras Quality Assurance
Depends On:
  Show dependency treegraph
Reported: 2012-07-09 16:40 EDT by Michael S. Tsirkin
Modified: 2012-07-10 03:19 EDT (History)
3 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2012-07-10 03:19:07 EDT
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Michael S. Tsirkin 2012-07-09 16:40:49 EDT
Description of problem:
I am using kde.  at some point I got this error:

Version-Release number of selected component (if applicable):

How reproducible:
first time this happened

Steps to Reproduce:
at some point after using kde for several days I got this
selinux error
Actual results:
SELinux is preventing /usr/sbin/tmpwatch from setattr access on the directory kdecache-root.

*****  Plugin catchall_labels (83.8 confidence) suggests  ********************

If you want to allow tmpwatch to have setattr access on the kdecache-root directory
Then you need to change the label on kdecache-root
# semanage fcontext -a -t FILE_TYPE 'kdecache-root'
where FILE_TYPE is one of the following: amavis_spool_t, man_t, usr_t, tmpfile, sandbox_file_t, kismet_log_t, rpm_var_cache_t, httpd_cache_t, user_home_type, print_spool_t. 
Then execute: 
restorecon -v 'kdecache-root'

Expected results:
should not get errors from kde usage

Additional info:
Comment 1 Miroslav Grepl 2012-07-10 03:19:07 EDT

*** This bug has been marked as a duplicate of bug 836262 ***

Note You need to log in before you can comment on or make changes to this bug.