Bug ID 1225984
Summary [SELinux] GDM avcs for wtmp.db-journal
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware Other
OS openSUSE Tumbleweed
Status NEW
Severity Normal
Priority P5 - None
Component Security
Assignee security-team@suse.de
Reporter filippo.bonazzi@suse.com
QA Contact security-team@suse.de
Target Milestone ---
Found By ---
Blocker ---

Operating System: Tumbleweed
SELinux status, mode and policy name: permissive, targeted
SELinux policy version and repository: 20240411-231.2 from Security:SELinux
The software (incl. version) that is affected by the SELinux issue and the
error message: gdm-session-worker
SELinux Audit log:

time->Wed Jun  5 10:05:30 2024
type=AVC msg=audit(1717574730.824:139): avc:  denied  { add_name } for 
pid=1704 comm="gdm-session-wor" name="wtmp.db-journal"
scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023
tcontext=system_u:object_r:wtmp_t:s0 tclass=dir permissive=1
----
time->Wed Jun  5 10:05:30 2024
type=AVC msg=audit(1717574730.824:140): avc:  denied  { create } for  pid=1704
comm="gdm-session-wor" name="wtmp.db-journal"
scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023
tcontext=system_u:object_r:wtmp_t:s0 tclass=file permissive=1
----
time->Wed Jun  5 10:05:30 2024
type=AVC msg=audit(1717574730.824:141): avc:  denied  { setattr } for  pid=1704
comm="gdm-session-wor" name="wtmp.db-journal" dev="vda2" ino=158633
scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023
tcontext=system_u:object_r:wtmp_t:s0 tclass=file permissive=1
----
time->Wed Jun  5 10:05:30 2024
type=AVC msg=audit(1717574730.961:142): avc:  denied  { remove_name } for 
pid=1704 comm="gdm-session-wor" name="wtmp.db-journal" dev="vda2" ino=158633
scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023
tcontext=system_u:object_r:wtmp_t:s0 tclass=dir permissive=1
----
time->Wed Jun  5 10:05:30 2024
type=AVC msg=audit(1717574730.961:143): avc:  denied  { unlink } for  pid=1704
comm="gdm-session-wor" name="wtmp.db-journal" dev="vda2" ino=158633
scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023
tcontext=system_u:object_r:wtmp_t:s0 tclass=file permissive=1


You are receiving this mail because: