Created attachment 777766 [details] Output of "ausearch -m avc -ts recent" OpenLMI-Service provider needs a policy. This is similar request as bz979037 and bz983422. Service provider manipulates system services, should be able to start/restart/.../stop a service and enable/disable a service. It uses systemd D-Bus API. Here's what I did: # cat mypol.te policy_module(mypol,1.0) pegasus_openlmi_domain_template(service) # make -f /usr/share/selinux/devel/Makefile mypol.pp # semodule -i mypol.pp # chcon -t pegasus_openlmi_service_exec_t /usr/libexec/pegasus/cmpiLMI_Service-cimprovagt Audit messages are attached. (I started/stopped/enabled/disabled/restarted two random services.)
Thank you for AVC msgs.
commit 1bd1f13cfbcb5af17e278d19dac7cb27cfe2358c Author: Miroslav Grepl <mgrepl> Date: Fri Jul 26 10:36:36 2013 +0200 Add support for cmpiLMI_Service-cimprovagt
selinux-policy-3.12.1-69.fc19 has been submitted as an update for Fedora 19. https://admin.fedoraproject.org/updates/selinux-policy-3.12.1-69.fc19
Package selinux-policy-3.12.1-69.fc19: * should fix your issue, * was pushed to the Fedora 19 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.12.1-69.fc19' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2013-14089/selinux-policy-3.12.1-69.fc19 then log in and leave karma (feedback).
selinux-policy-3.12.1-69.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report.