Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-83921

[rhel-10] avc: denied { setattr } for pid=6225 comm=cifs.idmap scontext=system_u:system_r:cifs_helper_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=key permissive=0

    • selinux-policy-40.13.28-1.el10
    • No
    • Moderate
    • 1
    • rhel-sst-security-selinux
    • ssg_security
    • 8
    • 1
    • False
    • Hide

      None

      Show
      None
    • None
    • SELINUX 250423: 5
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      What were you trying to do that didn't work?

      avc denial when running: https://gitlab.com/redhat/centos-stream/tests/kernel/kernel-tests/-/tree/main/filesystems/cifs/connectathon

      type=PROCTITLE msg=audit(03/17/25 23:05:19.728:1742) : proctitle=cifs.idmap 356480255 
      type=SYSCALL msg=audit(03/17/25 23:05:19.728:1742) : arch=x86_64 syscall=keyctl success=yes exit=0 a0=0xf a1=0x153f74ff a2=0x258 a3=0xa00030d40 items=0 ppid=56 pid=189408 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cifs.idmap exe=/usr/sbin/cifs.idmap subj=system_u:system_r:cifs_helper_t:s0 key=(null) 
      type=AVC msg=audit(03/17/25 23:05:19.728:1742) : avc:  denied  { setattr } for  pid=189408 comm=cifs.idmap scontext=system_u:system_r:cifs_helper_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=key permissive=0

      Please provide the package NVR for which the bug is seen:

      audit-4.0.3-1.el10.x86_64
      selinux-policy-40.13.26-1.el10.noarch 

      How reproducible is this bug?:

      100%

      Steps to reproduce

      1.  run the test on testing-farm
      testing-farm request --no-wait --arch x86_64 --git-url https://gitlab.com/redhat/centos-stream/tests/kernel/test-plans.git --plan '.*kernel-tier1/no-hw' --test 'filesystems/cifs/connectathon' --timeout 720 --context component=kernel --context distro=rhel-10.1 --context package-name=kernel --context stream=ystream --compose "RHEL-10.1-Nightly" 

      test execution: https://artifacts.osci.redhat.com/testing-farm/dfd92621-44ea-437f-b52e-77920434885b/

      cki tracker: https://datawarehouse.cki-project.org/issue/3642

              rhn-support-zpytela Zdenek Pytela
              bgoncalv@redhat.com Bruno Goncalves
              Jianhong Yin, Xiaoli Feng
              Zdenek Pytela Zdenek Pytela
              Milos Malik Milos Malik
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated: