| Summary: | sys-libs/libsemanage-2.4 - semanage_migrate_store requires setfscreate permission | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Sven Vermeulen (RETIRED) <swift> |
| Component: | SELinux | Assignee: | Sven Vermeulen (RETIRED) <swift> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | selinux |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | sec-policy r4 | ||
| Package list: | Runtime testing required: | --- | |
Fixed in repo, will be in rev4 Now in repo, ~arch r4 is stable |
$ /usr/libexec/selinux/semanage_migrate_store Error creating /var/lib/selinux Denial: type=AVC msg=audit(1425388830.408:108): avc: denied { setfscreate } for pid=7630 comm="semanage_migrat" scontext=root:sysadm_r:semanage_t:s0 tcontext=root:sysadm_r:semanage_t:s0 tclass=process permissive=0 With setfscreate; granted: $ /usr/libexec/selinux/semanage_migrate_store Migrating from /etc/selinux/mcs/modules/active to /var/lib/selinux/mcs/active Attempting to rebuild policy from /var/lib/selinux Reproducible: Always