| Bug ID | 1208477 |
|---|---|
| Summary | [SELinux] motd change logic causes AVC |
| Classification | openSUSE |
| Product | openSUSE Leap Micro |
| Version | 5.4 |
| Hardware | Other |
| OS | Other |
| Status | NEW |
| Severity | Normal |
| Priority | P5 - None |
| Component | Base |
| Assignee | security-team@suse.de |
| Reporter | jsegitz@suse.com |
| QA Contact | qa-bugs@suse.de |
| Found By | --- |
| Blocker | --- |
type=AVC msg=audit(1676883178.639:95): avc: denied { read } for pid=1349
comm="sshd" name="inactive.motd" dev="tmpfs" ino=1107
scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023
tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=0
just saw that while doing other tests. Occurs directly after
transactional-update setup-selinux. I assume that some script moves this file
around