-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
rhel-10.2
-
None
-
None
-
None
-
rhel-net-mgmt
-
1
-
False
-
False
-
-
None
-
None
-
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
None
What were you trying to do that didn't work?
For network dump target, the following SELinux error is shown when kdump.service is restarted
type=AVC msg=audit(1749464303.87:68): avc: denied
Unknown macro: { write }
for pid=4840 comm="NetworkManager" name="root" dev="dm-0" ino=184549504 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir permissive=0
What is the impact of this issue to you?
The seemingly harmless SELinux denial message will increase customer calls.
Please provide the package NVR for which the bug is seen:
NetworkManager-1.55.90-1.el10.x86_64
How reproducible is this bug?:
always
Steps to reproduce
- dnf install gvfs-client -yq
- systemctl restart test-nm.service
# cat /etc/systemd/system/test-nm.service [Unit] Description=Test NM [Service] Type=oneshot ExecStart=NetworkManager --print-config
- ausearch -m avc -c NetworkManager
Expected results
No SELinux error.
Actual results
A SELinux error is shown
Notes
For kdump.service to reproduce the error, /root/.cache somehow has to be deleted before.