On 21. 01. 22 17:03, Zdenek Pytela wrote:
Hey folks,
I've just noticed that `ausearch -m AVC,USER_AVC -ts recent` lists a lot of:
type=AVC msg=audit(1642770831.616:31668): avc: denied { read } for
pid=866275 comm="locate" name="plocate.db" dev="dm-0"
ino=5268062
scontext=system_u:system_r:setroubleshootd_t:s0
tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=0
Is this a bug, or some kind of error in configuration?
plocate uses /var/lib/plocate as its data directory, so it needs to have
assigned the correct label in selinux-policy. I've already submitted a PR for
the change.
https://github.com/fedora-selinux/selinux-policy/pull/1018
<
https://github.com/fedora-selinux/selinux-policy/pull/1018>
Thanks!
--
Miro Hrončok
--
Phone: +420777974800
IRC: mhroncok