-
Bug
-
Resolution: Unresolved
-
Normal
-
rhel-10.1
-
selinux-policy-40.13.28-1.el10
-
No
-
Moderate
-
1
-
rhel-sst-security-selinux
-
ssg_security
-
8
-
1
-
False
-
-
None
-
SELINUX 250423: 5
-
Pass
-
RegressionOnly
-
Unspecified
-
Unspecified
-
Unspecified
-
None
What were you trying to do that didn't work?
avc denial when running: https://gitlab.com/redhat/centos-stream/tests/kernel/kernel-tests/-/tree/main/filesystems/cifs/connectathon
type=PROCTITLE msg=audit(03/17/25 23:05:19.728:1742) : proctitle=cifs.idmap 356480255 type=SYSCALL msg=audit(03/17/25 23:05:19.728:1742) : arch=x86_64 syscall=keyctl success=yes exit=0 a0=0xf a1=0x153f74ff a2=0x258 a3=0xa00030d40 items=0 ppid=56 pid=189408 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cifs.idmap exe=/usr/sbin/cifs.idmap subj=system_u:system_r:cifs_helper_t:s0 key=(null) type=AVC msg=audit(03/17/25 23:05:19.728:1742) : avc: denied { setattr } for pid=189408 comm=cifs.idmap scontext=system_u:system_r:cifs_helper_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=key permissive=0
Please provide the package NVR for which the bug is seen:
audit-4.0.3-1.el10.x86_64 selinux-policy-40.13.26-1.el10.noarch
How reproducible is this bug?:
100%
Steps to reproduce
- run the test on testing-farm
testing-farm request --no-wait --arch x86_64 --git-url https://gitlab.com/redhat/centos-stream/tests/kernel/test-plans.git --plan '.*kernel-tier1/no-hw' --test 'filesystems/cifs/connectathon' --timeout 720 --context component=kernel --context distro=rhel-10.1 --context package-name=kernel --context stream=ystream --compose "RHEL-10.1-Nightly"
test execution: https://artifacts.osci.redhat.com/testing-farm/dfd92621-44ea-437f-b52e-77920434885b/
cki tracker: https://datawarehouse.cki-project.org/issue/3642
- links to
-
RHBA-2025:147963 selinux-policy bug fix and enhancement update