I am hitting this (non-fatal) denial when reloading a service via the systemd dbus API:
type=USER_AVC msg=audit(1570462081.809:743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: denied { status } for auid=n/a uid=0 gid=1001 cmdline="/usr/bin/python2 /usr/local/bin/test.py" scontext=system_u:system_r:denatc_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
https://selinuxproject.org/page/NB_ObjectClassesPermissions defines this permission as "Get system status information," which isn't particularly helpful. Ultimately, I need to decide whether to allow or "dontaudit" this denial, so any information/pointers on what systemd is doing here and what functionality I will lose if I dontaudit this denial would be appreciated. Thanks! -- ======================================================================== Ian Pilcher arequipeno@xxxxxxxxx -------- "I grew up before Mark Zuckerberg invented friendship" -------- ========================================================================