Bug ID 1224120
Summary [SELinux] AVC denial systemd-fstab-g on MicroOS
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Security
Assignee security-team@suse.de
Reporter mcepl@suse.com
QA Contact qa-bugs@suse.de
CC arvidjaar@gmail.com
Target Milestone ---
Found By ---
Blocker ---

mitmanek:~ # ausearch -m AVC -ts boot
----
time->Fri May 10 00:24:35 2024
type=AVC msg=audit(1715293475.979:21): avc:  denied  { map_read map_write } for
 pid=1237 comm="systemd-fstab-g"
scontext=system_u:system_r:systemd_fstab_generator_t:s0
tcontext=system_u:system_r:init_t:s0 tclass=bpf permissive=1
----
time->Fri May 10 00:24:35 2024
type=AVC msg=audit(1715293475.979:22): avc:  denied  { map_read map_write } for
 pid=1245 comm="systemd-gpt-aut"
scontext=system_u:system_r:systemd_gpt_generator_t:s0
tcontext=system_u:system_r:init_t:s0 tclass=bpf permissive=1
----
time->Fri May 10 00:34:38 2024
type=AVC msg=audit(1715294078.083:118): avc:  denied  { unlink } for  pid=1894
comm="bootctl" name="bfb41e21a4f34f10958f75adb1378666-6.8.7-1-default-75.conf"
dev="nvme0n1p2" ino=43 scontext=system_u:system_r:snapperd_t:s0
tcontext=system_u:object_r:dosfs_t:s0 tclass=file permissive=1
mitmanek:~ # 

I don’t see any actual negative effects.

Also mentioned on
https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/2KDAFQ6GBGUAPXWINMR43PVX2U2VYSFD/


You are receiving this mail because: