Project

General

Profile

Actions

Bug #17518

closed

postgresl client in relayd tries to read krb conf

Added by Alexis Mousset almost 4 years ago. Updated almost 4 years ago.

Status:
Released
Priority:
N/A
Category:
Packaging
Target version:
Severity:
Minor - inconvenience | misleading | easy workaround
UX impact:
User visibility:
Infrequent - complex configurations | third party integrations
Effort required:
Priority:
22
Name check:
To do
Fix check:
To do
Regression:

Description

type=AVC msg=audit(1590510637.766:7451): avc:  denied  { getattr } for  pid=30214 comm="r2d2-worker-1" path="/etc/krb5.conf" dev="dm-0" ino=68899692 scontext=system_u:system_r:rudder_relayd_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=0

It should not be necessary.


Related issues 1 (1 open0 closed)

Related to Rudder - Bug #18078: SELinux error for relayd search access on krb5 on centos 8NewActions
Actions

Also available in: Atom PDF