822642 – sys-apps/openrc-0.44.7: rc-service returns SELinux assertion

Bug 822642 - sys-apps/openrc-0.44.7: rc-service returns SELinux assertion

Summary: sys-apps/openrc-0.44.7: rc-service returns SELinux assertion

Status:	CONFIRMED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	OpenRC Team

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2021-11-09 12:03 UTC by Jonathan Davies
Modified:	2021-11-15 11:16 UTC (History)
CC List:	4 users (show)

See Also:	821520
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Jonathan Davies 2021-11-09 12:03:50 UTC

Since upgrading to 0.44.7, rc-service returns this for me whenever I try to restart a service:

$ sudo run_init rc-service unbound restart
Password: 
Authenticating user.
Assertion failed: avc_running (avc.c: avc_context_to_sid_raw: 73)
fish: 'sudo run_init rc-service unboun…' terminated by signal SIGABRT (Abort)

Comment 1 Sam James archtester

2021-11-13 05:02:51 UTC

Please try with 0.44.8.

Comment 2 Jonathan Davies 2021-11-15 11:16:38 UTC

Looked into this, and I've fixed the policy at https://github.com/perfinion/hardened-refpolicy/pull/25