-
Bug
-
Resolution: Unresolved
-
Critical
-
rhel-9.4
For image based updates we'd like to support having /var be empty.
# rpm -q selinux-policy
selinux-policy-38.1.33-1.el9.noarch
# journalctl --grep=avc
Mar 15 16:59:22 localhost kernel: audit: type=1400 audit(1710521962.366:4): avc: denied { create } for pid=520 comm="systemd-random-" name="random-seed" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=0
Mar 15 16:59:22 localhost kernel: audit: type=1400 audit(1710521962.366:5): avc: denied { write } for pid=465 comm="systemd-journal" name="var" dev="vda4" ino=16908417 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=0
