Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1517405
| Summary: | SELinux is preventing plymouthd from 'map' accesses on the chr_file /dev/fb0. | |||
|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Yusoo <soopace> | |
| Component: | selinux-policy | Assignee: | Lukas Vrabec <lvrabec> | |
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | |
| Severity: | unspecified | Docs Contact: | ||
| Priority: | unspecified | |||
| Version: | 27 | CC: | antonio_fortes, benjamin.masse, c.crispino8611, chad.schroeder, crusty85, dmitryburstein, dwalsh, juanreyes, lvrabec, marc.jadoul, marlls1989, mgrepl, mijail, mikhail.v.gavrilov, pixxxx, plautrba, pmoore, tlindsay42 | |
| Target Milestone: | --- | |||
| Target Release: | --- | |||
| Hardware: | x86_64 | |||
| OS: | Unspecified | |||
| Whiteboard: | abrt_hash:e462dbee4e3ba9367a2778f507b3493afbdd7753b3ee87b8ff109d34c4ff34dd;VARIANT_ID=workstation; | |||
| Fixed In Version: | selinux-policy-3.13.1-283.19.fc27 | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 1551842 (view as bug list) | Environment: | ||
| Last Closed: | 2018-01-02 16:47:35 UTC | Type: | --- | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
*** Bug 1482350 has been marked as a duplicate of this bug. *** selinux-policy-3.13.1-283.18.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-8225c4e502 selinux-policy-3.13.1-283.18.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-8225c4e502 selinux-policy-3.13.1-283.19.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-8225c4e502 selinux-policy-3.13.1-283.19.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-8225c4e502 selinux-policy-3.13.1-283.19.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report. Hello, I have the same error. Actually I am using NVIDIA driver because Nouveau locked several time on my laptop. My laptop boot. Wayland is disabled in GSM config. After boot when I log in, my graphical interface freeze including the mouse . After reboot I can see this selinux error.... But there may be other errors. NB: I have the right selinux policy installed. Description of problem: selinux-policy-3.13.1-283.21.fc27.noarch with proprietary NVIDIA drivers installed. Version-Release number of selected component: selinux-policy-3.13.1-283.19.fc27.noarch Additional info: reporter: libreport-2.9.3 hashmarkername: setroubleshoot kernel: 4.14.11-300.fc27.x86_64 type: libreport *** Bug 1541689 has been marked as a duplicate of this bug. *** Description of problem:
type=AVC msg=audit(1519152096.009:449): avc: denied { map } for pid=3998 comm="plymouthd" path="/dev/fb0" dev="devtmpfs" ino=2076 scontext=system_u:system_r:plymouthd_t:s0 tcontext=system_u:object_r:framebuf_device_t:s0 tclass=chr_file permissive=0
Version-Release number of selected component:
selinux-policy-3.13.1-283.24.fc27.noarch
Description of problem: This problem ocurred during reboot, and there was a software update the day before. Version-Release number of selected component: selinux-policy-3.13.1-283.26.fc27.noarch Additional info: reporter: libreport-2.9.3 hashmarkername: setroubleshoot kernel: 4.15.8-300.fc27.x86_64 type: libreport |
Description of problem: SELinux is preventing plymouthd from 'map' accesses on the chr_file /dev/fb0. ***** Plugin catchall (100. confidence) suggests ************************** If plymouthd는 디폴트로 fb0 chr_file에서 map 액세스를 허용해야 합니다. Then 이 버그를 보고해야 합니다. 이러한 액세스를 허용하기 위해 로컬 정채 모듈을 생성할 수 있습니다. Do allow this access for now by executing: # ausearch -c 'plymouthd' --raw | audit2allow -M my-plymouthd # semodule -X 300 -i my-plymouthd.pp Additional Information: Source Context system_u:system_r:plymouthd_t:s0 Target Context system_u:object_r:framebuf_device_t:s0 Target Objects /dev/fb0 [ chr_file ] Source plymouthd Source Path plymouthd Port <알려지지 않음> Host (removed) Source RPM Packages Target RPM Packages Policy RPM selinux-policy-3.13.1-283.16.fc27.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 4.13.13-300.fc27.x86_64 #1 SMP Wed Nov 15 15:47:50 UTC 2017 x86_64 x86_64 Alert Count 1 First Seen 2017-11-24 21:19:51 KST Last Seen 2017-11-24 21:19:51 KST Local ID 93ac0d30-0f1f-434d-a776-2f79a8fad532 Raw Audit Messages type=AVC msg=audit(1511525991.715:281): avc: denied { map } for pid=11983 comm="plymouthd" path="/dev/fb0" dev="devtmpfs" ino=1035 scontext=system_u:system_r:plymouthd_t:s0 tcontext=system_u:object_r:framebuf_device_t:s0 tclass=chr_file permissive=0 Hash: plymouthd,plymouthd_t,framebuf_device_t,chr_file,map Version-Release number of selected component: selinux-policy-3.13.1-283.16.fc27.noarch Additional info: component: selinux-policy reporter: libreport-2.9.3 hashmarkername: setroubleshoot kernel: 4.13.9-300.fc27.x86_64 type: libreport Potential duplicate: bug 1482350