Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

avc denial for dbus-broker #1364

Closed
bcressey opened this issue Mar 4, 2021 · 0 comments · Fixed by #1434
Closed

avc denial for dbus-broker #1364

bcressey opened this issue Mar 4, 2021 · 0 comments · Fixed by #1434
Assignees
@bcressey
Labels
type/bug Something isn't working
Milestone
v1.0.8

Comments

@bcressey
Copy link
Contributor

bcressey commented Mar 4, 2021

More recent builds have this AVC denial in the journal:

Mar 03 01:22:24 localhost systemd[1]: selinux: avc: denied { status } for auid=n/a uid=0 gid=81 cmdline="/usr/bin/dbus-broker-launch --scope system" scontext=system_u:system_r:bus_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=0

This is likely related to the new dbus-broker. Note that we no longer see the denials from #1015.
@bcressey bcressey added type/bug Something isn't working priority/p0 labels Mar 4, 2021
@bcressey bcressey self-assigned this Mar 4, 2021
@gregdek gregdek added this to the next milestone Mar 24, 2021
@bcressey bcressey mentioned this issue Mar 31, 2021
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@bcressey bcressey

Labels
type/bug Something isn't working
Projects
None yet
Milestone
v1.0.8
Development

Successfully merging a pull request may close this issue.

fix avc denial for dbus-broker bcressey/bottlerocket
2 participants
@bcressey @gregdek