I am hitting this (non-fatal) denial when reloading a service via the
systemd dbus API:
type=USER_AVC msg=audit(1570462081.809:743): pid=1 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0
msg='avc: denied { status } for auid=n/a uid=0 gid=1001
cmdline="/usr/bin/python2 /usr/local/bin/test.py"
scontext=system_u:system_r:denatc_t:s0
tcontext=system_u:system_r:init_t:s0 tclass=system
exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
https://selinuxproject.org/page/NB_ObjectClassesPermissions defines this
permission as "Get system status information," which isn't particularly
helpful.
Ultimately, I need to decide whether to allow or "dontaudit" this
denial, so any information/pointers on what systemd is doing here and
what functionality I will lose if I dontaudit this denial would be
appreciated.
Thanks!
--
========================================================================
Ian Pilcher arequipeno@xxxxxxxxx
-------- "I grew up before Mark Zuckerberg invented friendship" --------
========================================================================
