I tried relabeling everything in /usr/share/setroubleshoot to lib_t
and restarting setroubleshoot service. Now get:
type=AVC msg=audit(1155049018.305:33): avc: denied { write } for
pid=4347 comm="python" name="auditd_sock" dev=dm-0 ino=2785383
scontext=user_u:system_r:setroubleshootd_t:s0
tcontext=system_u:object_r:auditd_var_run_t:s0 tclass=sock_file
type=SYSCALL msg=audit(1155049018.305:33): arch=40000003 syscall=102
success=no exit=-13 a0=3 a1=bf9ce780 a2=2db118 a3=0 items=0 ppid=1
pid=4347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0
fsgid=0 tty=(none) comm="python" exe="/usr/bin/python"
subj=user_u:system_r:setroubleshootd_t:s0 key=(null)
tom
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
