-
Bug
-
Resolution: Unresolved
-
Minor
-
None
-
rhel-10.2
-
None
-
None
-
rhel-security-selinux
-
None
-
False
-
False
-
-
No
-
None
-
None
-
None
-
Unspecified Release Note Type - Unknown
-
Unspecified
-
Unspecified
-
Unspecified
-
None
What were you trying to do that didn't work?
SELinux status: enabled
SELinuxfs mount: /sys/fs/selinux
SELinux root directory: /etc/selinux
Loaded policy name: targeted
Current mode: enforcing
Mode from config file: enforcing
Policy MLS status: enabled
Policy deny_unknown status: allowed
Memory protection checking: actual (secure)
Max kernel policy version: 33
selinux-policy-42.1.11-1.el10.noarch
----
time->Fri Nov 28 20:22:17 2025
type=PROCTITLE msg=audit(1764379337.974:430): proctitle="/usr/sbin/rpc.statd"
type=SYSCALL msg=audit(1764379337.974:430): arch=80000016 syscall=10 success=no exit=-13 a0=2aa00e8ece6 a1=3ffc5d79b58 a2=fffffffffffff000 a3=0 items=0 ppid=7976 pid=7984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rpc.statd" exe="/usr/sbin/rpc.statd" subj=system_u:system_r:rpcd_t:s0 key=(null)
type=AVC msg=audit(1764379337.974:430): avc: denied { unlink } for pid=7984 comm="rpc.statd" name="rpc.statd.pid" dev="tmpfs" ino=1511 scontext=system_u:system_r:rpcd_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=file permissive=0
----
Please provide the package NVR for which the bug is seen:
kernel-6.12.0-162.el10
selinux-policy-42.1.11-1.el10
How reproducible is this bug?:
many times
Expected results
No AVC denied for defined operations
Actual results
AVC denied
Additional info:
beaker job:
https://beaker.engineering.redhat.com/jobs/11997792
https://beaker.engineering.redhat.com/jobs/11985978