[Users] SELinux denials on Sanlock

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/19/2012 12:13 PM, David Teigland wrote:
> type=AVC msg=audit(1340053766.745:7): avc:  denied  { open } for
>>> pid=1908 comm="wdmd" name="wdmd.pid" dev=dm-0 ino=1574530 
>>> scontext=system_u:system_r:wdmd_t:s0 
>>> tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file
>>> 
>>> type=AVC msg=audit(1340053766.746:8): avc:  denied  { lock } for 
>>> pid=1908 comm="wdmd" path="/var/run/wdmd/wdmd.pid" dev=dm-0 ino=1574530
>>> scontext=system_u:system_r:wdmd_t:s0 
>>> tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file
>>> 
>>> type=SYSCALL msg=audit(1340053766.746:8): arch=x86_64 syscall=fcntl 
>>> success=yes exit=0 a0=4 a1=6 a2=7fffae656290 a3=fffffff3 items=0 ppid=1
>>> pid=1908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
>>> sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=wdmd exe=/usr/sbin/wdmd
>>> subj=system_u:system_r:wdmd_t:s0 key=(null)

THis is caused by a bug in sanlock, the init script for wdmd was creating the
/var/run/wdmd file but not running restorecon on it.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/gtvoACgkQrlYvE4MpobMWRQCgyKpnY2mQeLvRdbOEK6JfKP2m
K9IAnjc8TDq1wYDenCtt7CDjQQrw+F8I
=mM24
-----END PGP SIGNATURE-----