674568 – nearly every packages tries to map /etc/passwd and/or /etc/group (mcs)

Bug 674568 - nearly every packages tries to map /etc/passwd and/or /etc/group (mcs)

Summary: nearly every packages tries to map /etc/passwd and/or /etc/group (mcs)

Status:	UNCONFIRMED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	SELinux (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	SE Linux Bugs

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2019-01-05 00:07 UTC by Vilgot Fredenberg
Modified:	2019-01-05 00:08 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
my /var/log/audit/audit.log file (note I enabled dontaudit in the middle of it) (audit.log.xz,49.43 KB, application/x-xz) 2019-01-05 00:07 UTC, Vilgot Fredenberg	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Vilgot Fredenberg 2019-01-05 00:07:16 UTC

Created attachment 559886 [details]
my /var/log/audit/audit.log file (note I enabled dontaudit in the middle of it)

I get lot's of avc denied { map } messages on /etc/passwd and /etc/group. I've not noticed any loss in functionality so I've created a custom module that dontaudit a lot of processes.
It looks a little like this "dontaudit dhcpc_script_t etc_t:file map;" etc.