[Bug 1098802] New: SELinux alerts starting and running couchdb

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1098802

Bug ID: 1098802
           Summary: SELinux alerts starting and running couchdb
           Product: Fedora
           Version: 20
         Component: couchdb
          Assignee: [e-mail]
          Reporter: [e-mail]
        QA Contact: [e-mail]
                CC: [e-mail], [e-mail]

Created attachment 896832
  --> https://bugzilla.redhat.com/attachment.cgi?id=896832&action=edit
Output of `sudo grep type=AVC /var/log/audit/audit.log`

Description of problem:

After installing couchdb in F20, when starting the service you get SELinux
alerts.  The web UI runs, but the internal self-test fails.

Version-Release number of selected component (if applicable):

Installed:
  couchdb.x86_64 0:1.5.0-1.fc20

Dependency Installed:
  erlang-asn1.x86_64 0:R16B-03.5.fc20                                           
  erlang-compiler.x86_64 0:R16B-03.5.fc20                                       
  erlang-crypto.x86_64 0:R16B-03.5.fc20                                         
  erlang-erts.x86_64 0:R16B-03.5.fc20                                           
  erlang-et.x86_64 0:R16B-03.5.fc20                                             
  erlang-gs.x86_64 0:R16B-03.5.fc20                                             
  erlang-hipe.x86_64 0:R16B-03.5.fc20                                           
  erlang-ibrowse.x86_64 0:2.2.0-8.fc20                                          
  erlang-inets.x86_64 0:R16B-03.5.fc20                                          
  erlang-kernel.x86_64 0:R16B-03.5.fc20                                         
  erlang-mnesia.x86_64 0:R16B-03.5.fc20                                         
  erlang-mochiweb.x86_64 0:2.4.2-3.fc20                                         
  erlang-oauth.x86_64 0:1.4.0-1.fc20                                            
  erlang-observer.x86_64 0:R16B-03.5.fc20                                       
  erlang-os_mon.x86_64 0:R16B-03.5.fc20                                         
  erlang-otp_mibs.x86_64 0:R16B-03.5.fc20                                       
  erlang-public_key.x86_64 0:R16B-03.5.fc20                                     
  erlang-runtime_tools.x86_64 0:R16B-03.5.fc20                                  
  erlang-sasl.x86_64 0:R16B-03.5.fc20                                           
  erlang-snappy.x86_64 0:1.0.3-0.5.git80db168.fc20                              
  erlang-snmp.x86_64 0:R16B-03.5.fc20                                           
  erlang-ssl.x86_64 0:R16B-03.5.fc20                                            
  erlang-stdlib.x86_64 0:R16B-03.5.fc20                                         
  erlang-syntax_tools.x86_64 0:R16B-03.5.fc20                                   
  erlang-tools.x86_64 0:R16B-03.5.fc20                                          
  erlang-webtool.x86_64 0:R16B-03.5.fc20                                        
  erlang-wx.x86_64 0:R16B-03.5.fc20                                             
  erlang-xmerl.x86_64 0:R16B-03.5.fc20                                          
  lksctp-tools.x86_64 0:1.0.15-2.fc20

How reproducible:

sudo systemctl start couchdb

Browse to http://127.0.0.1:5984/_utils/verify_install.html and choose to verify
your installation.

Actual results:

Three alerts in the SELinux Alert Browser

Expected results:

All operations succeed.

Additional info:

Output of `sudo grep type=AVC /var/log/audit/audit.log` attached.  That output
suggests there may be a conflict with my install of docker-io?