search

open-iscsi / targetd

Remote configuration of a LIO-based storage appliance
GNU General Public License v3.0
72 stars 28 forks source link

selinux denials for Fedora #98

Open tasleson opened 11 months ago

tasleson commented 11 months ago

Getting the following denials on F38 when running libStorageMgmt test suite.

Dec 07 16:43:22 targetd audit[677]: USER_MAC_STATUS pid=677 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  op=setenforce lsm=selinux enforcing=0 res=1 exe="/usr/bin/dbus-broker" sauid=81 hostname=? addr=? terminal=?'
Dec 07 16:43:23 targetd audit[754]: AVC avc:  denied  { write } for  pid=754 comm="targetd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:targetd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
Dec 07 16:43:23 targetd audit[754]: AVC avc:  denied  { add_name } for  pid=754 comm="targetd" name="rtslib_backstore.lock" scontext=system_u:system_r:targetd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
Dec 07 16:43:23 targetd audit[754]: AVC avc:  denied  { create } for  pid=754 comm="targetd" name="rtslib_backstore.lock" scontext=system_u:system_r:targetd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
Dec 07 16:43:23 targetd audit[754]: AVC avc:  denied  { read write open } for  pid=754 comm="targetd" path="/run/rtslib_backstore.lock" dev="tmpfs" ino=2620 scontext=system_u:system_r:targetd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
Dec 07 16:43:23 targetd audit[754]: AVC avc:  denied  { getattr } for  pid=754 comm="targetd" path="/run/rtslib_backstore.lock" dev="tmpfs" ino=2620 scontext=system_u:system_r:targetd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
Dec 07 16:43:23 targetd audit[754]: AVC avc:  denied  { ioctl } for  pid=754 comm="targetd" path="/run/rtslib_backstore.lock" dev="tmpfs" ino=2620 ioctlcmd=0x5401 scontext=system_u:system_r:targetd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
Dec 07 16:43:23 targetd audit[754]: AVC avc:  denied  { lock } for  pid=754 comm="targetd" path="/run/rtslib_backstore.lock" dev="tmpfs" ino=2620 scontext=system_u:system_r:targetd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1