Created attachment 665022 [details] grep qemu-kvm /var/log/audit/audit.log Description of problem: getting SElinux policy errors Version-Release number of selected component (if applicable): F18 beta current + libvirt-1.0.1 Here are the updates that fixed things: -------------------------------- module qemu-kvm-2 1.0; require { type svirt_t; class netlink_route_socket { bind create }; } #============= svirt_t ============== allow svirt_t self:netlink_route_socket bind; #!!!! This avc is allowed in the current policy allow svirt_t self:netlink_route_socket create; ------------------------------------------------- module qemu-kvm-3 1.0; require { type svirt_t; class netlink_route_socket { bind getattr create }; } #============= svirt_t ============== allow svirt_t self:netlink_route_socket getattr; #!!!! This avc is allowed in the current policy allow svirt_t self:netlink_route_socket { bind create }; ---
Fixed in selinux-policy-3.11.1-66.fc18.noarch
selinux-policy-3.11.1-67.fc18 has been submitted as an update for Fedora 18. https://admin.fedoraproject.org/updates/selinux-policy-3.11.1-67.fc18
Package selinux-policy-3.11.1-67.fc18: * should fix your issue, * was pushed to the Fedora 18 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.11.1-67.fc18' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-20813/selinux-policy-3.11.1-67.fc18 then log in and leave karma (feedback).
selinux-policy-3.11.1-67.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report.