-
Bug
-
Resolution: Done-Errata
-
Normal
-
6.15.0
-
8
-
False
-
foreman-installer-3.14.0.4, pulpcore-selinux-2.1.0
-
Moderate
-
Artemis Sprint 154
-
sat-artemis
-
None
-
None
-
None
-
Automated
-
No
Description of problem:
Multiple selinux denails are reported in the logs of Satellite
Version-Release number of selected component (if applicable):
6.15.0
How reproducible:
Always
Steps to Reproduce:
1.Configure a satellite and check the status of selinux with "getenforce" command.
2.Run "ausearch --input-logs -m avc -ts today --raw"
3.Search for the denials in /var/log/audit/audit.log
Actual results:
Multiple selinux denials are reported
Expected results:
There should not be any selinux denials.
Additional info:
- clones
-
SAT-23121 pulpcore related SELinux denials
-
- Release Pending
-
- depends on
-
SAT-35351 Use pulpcore-worker entrypoint directly, without a wrapper by evgeni · Pull Request #383 · theforeman/puppet-pulpcore · GitHub
-
- Closed
-
- is blocked by
-
SAT-35358 allow pulpcore_server_t to connect to http cache and squid by evgeni · Pull Request #88 · pulp/pulpcore-selinux · GitHub
-
- Closed
-
-
SAT-35359 allow pulpcore_t to connect to unix sockets for logging by evgeni · Pull Request #89 · pulp/pulpcore-selinux · GitHub
-
- Closed
-
- is duplicated by
-
SAT-27177 Pulp api worker selinux AVC error
-
- Closed
-
- links to
-
RHBA-2025:153961 Satellite 6.17.4 Async Update