Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.

Bug 119644

Summary: tmpwatch can not stat initrd's tmp files.
Product: [Fedora] Fedora Reporter: Aleksey Nogin <aleksey>
Component: policyAssignee: Daniel Walsh <dwalsh>
Status: CLOSED RAWHIDE QA Contact: Ben Levenson <benl>
Severity: medium Docs Contact:
Priority: medium    
Version: rawhideCC: pgraner
Target Milestone: ---Keywords: SELinux
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2004-05-10 15:06:59 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 122683    

Description Aleksey Nogin 2004-04-01 00:31:39 UTC
/etc/cron.daily/tmpwatch:

error: failed to lstat /tmp/initrd.Fs6335/dev/console: Permission denied
error: failed to lstat /tmp/initrd.Fs6335/dev/null: Permission denied
error: failed to lstat /tmp/initrd.Fs6335/dev/ram: Permission denied
error: failed to lstat /tmp/initrd.Fs6335/dev/systty: Permission denied
error: failed to lstat /tmp/initrd.Fs6335/dev/tty1: Permission denied
error: failed to lstat /tmp/initrd.Fs6335/dev/tty2: Permission denied
error: failed to lstat /tmp/initrd.Fs6335/dev/tty3: Permission denied
error: failed to lstat /tmp/initrd.Fs6335/dev/tty4: Permission denied

Mar 31 04:02:42 dell kernel: audit(1080734562.496:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/console dev=hda2 ino=509069
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=chr_file
Mar 31 04:02:42 dell kernel: audit(1080734562.497:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/null dev=hda2 ino=509070
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=chr_file
Mar 31 04:02:42 dell kernel: audit(1080734562.497:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/ram dev=hda2 ino=509071
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=blk_file
Mar 31 04:02:42 dell kernel: audit(1080734562.498:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/systty dev=hda2 ino=509072
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=chr_file
Mar 31 04:02:42 dell kernel: audit(1080734562.498:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/tty1 dev=hda2 ino=509073
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=chr_file
Mar 31 04:02:42 dell kernel: audit(1080734562.498:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/tty2 dev=hda2 ino=509074
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=chr_file
Mar 31 04:02:42 dell kernel: audit(1080734562.498:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/tty3 dev=hda2 ino=509075
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=chr_file
Mar 31 04:02:42 dell kernel: audit(1080734562.498:0): avc:  denied  {
getattr } for  pid=30369 exe=/usr/sbin/tmpwatch
path=/tmp/initrd.Fs6335/dev/tty4 dev=hda2 ino=509076
scontext=system_u:system_r:tmpreaper_t
tcontext=root:object_r:bootloader_tmp_t tclass=chr_file

tmpwatch-2.9.0-2.1 policy-sources-1.9.1-2

Comment 1 Daniel Walsh 2004-04-01 18:17:00 UTC
policy-sources-1.9.2-2