Bugzilla – Bug 1225984
[SELinux] GDM avcs for wtmp.db-journal
Last modified: 2024-07-02 11:55:05 UTC
Operating System: Tumbleweed SELinux status, mode and policy name: permissive, targeted SELinux policy version and repository: 20240411-231.2 from Security:SELinux The software (incl. version) that is affected by the SELinux issue and the error message: gdm-session-worker SELinux Audit log: time->Wed Jun 5 10:05:30 2024 type=AVC msg=audit(1717574730.824:139): avc: denied { add_name } for pid=1704 comm="gdm-session-wor" name="wtmp.db-journal" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:wtmp_t:s0 tclass=dir permissive=1 ---- time->Wed Jun 5 10:05:30 2024 type=AVC msg=audit(1717574730.824:140): avc: denied { create } for pid=1704 comm="gdm-session-wor" name="wtmp.db-journal" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:wtmp_t:s0 tclass=file permissive=1 ---- time->Wed Jun 5 10:05:30 2024 type=AVC msg=audit(1717574730.824:141): avc: denied { setattr } for pid=1704 comm="gdm-session-wor" name="wtmp.db-journal" dev="vda2" ino=158633 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:wtmp_t:s0 tclass=file permissive=1 ---- time->Wed Jun 5 10:05:30 2024 type=AVC msg=audit(1717574730.961:142): avc: denied { remove_name } for pid=1704 comm="gdm-session-wor" name="wtmp.db-journal" dev="vda2" ino=158633 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:wtmp_t:s0 tclass=dir permissive=1 ---- time->Wed Jun 5 10:05:30 2024 type=AVC msg=audit(1717574730.961:143): avc: denied { unlink } for pid=1704 comm="gdm-session-wor" name="wtmp.db-journal" dev="vda2" ino=158633 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:wtmp_t:s0 tclass=file permissive=1
done, closing
This is an autogenerated message for OBS integration: This bug (1225984) was mentioned in https://build.opensuse.org/request/show/1184840 Factory / selinux-policy