9:38 a.m.
https://bugzilla.redhat.com/show_bug.cgi?id=1195804
Bug ID: 1195804
Summary: docker run fails on rawhide with setenforce 1
Product: Fedora
Version: rawhide
Component: docker-io
Assignee: lsm5(a)redhat.com
Reporter: lsm5(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: adimania(a)gmail.com, admiller(a)redhat.com,
golang(a)lists.fedoraproject.org, hushan.jia(a)gmail.com,
jchaloup(a)redhat.com, jperrin(a)centos.org,
lsm5(a)redhat.com, mattdm(a)redhat.com,
mgoldman(a)redhat.com, miminar(a)redhat.com, s(a)shk.io,
thrcka(a)redhat.com, vbatts(a)redhat.com
Description of problem:
On rawhide, docker run commands fail with selinux enforcing.
Feb 24 09:34:01 naruto kernel: [605832.428983] audit: type=1400
audit(1424792041.549:3572): avc: denied { entrypoint } for pid=19015
comm="docker" path="/var/lib/docker/init/dockerinit-1.5.0-dev"
dev="sda2"
ino=134594 scontext=system_u:system_r:spc_t:s0
tcontext=system_u:object_r:docker_var_lib_t:s0 tclass=file permissive=0
Feb 24 09:34:01 naruto kernel: [605832.429083] audit: type=1300
audit(1424792041.549:3572): arch=c000003e syscall=59 success=no exit=-13
a0=c208b05290 a1=c208602500 a2=c2085ceb20 a3=0 items=0 ppid=7465 pid=19015
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
tty=(none) ses=4294967295 comm="docker" exe="/usr/bin/docker"
subj=system_u:system_r:docker_t:s0 key=(null)
Feb 24 09:34:01 naruto kernel: [605832.429110] audit: type=1327
audit(1424792041.549:3572):
proctitle=2F7573722F62696E2F646F636B6572002D64002D2D73656C696E75782D656E61626C6564
--
You are receiving this mail because:
You are on the CC list for the bug.
9:47 a.m.
New subject: [Bug 1195804] docker run fails on rawhide with setenforce 1
https://bugzilla.redhat.com/show_bug.cgi?id=1195804
Daniel Walsh <dwalsh(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |dominick.grift(a)gmail.com,
| |lvrabec(a)redhat.com,
| |mgrepl(a)redhat.com,
| |plautrba(a)redhat.com
Component|docker-io |selinux-policy
Assignee|lsm5(a)redhat.com |mgrepl(a)redhat.com
--
You are receiving this mail because:
You are on the CC list for the bug.
9:48 a.m.
New subject: [Bug 1195804] docker run fails on rawhide with setenforce 1
https://bugzilla.redhat.com/show_bug.cgi?id=1195804
Daniel Walsh <dwalsh(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |ASSIGNED
--- Comment #1 from Daniel Walsh <dwalsh(a)redhat.com> ---
I have checked in fixes for this into selinux-policy upstream. We need a new
build of selinux-policy for rawhide.
--
You are receiving this mail because:
You are on the CC list for the bug.
11:32 a.m.
New subject: [Bug 1195804] docker run fails on rawhide with setenforce 1
https://bugzilla.redhat.com/show_bug.cgi?id=1195804
Lukas Vrabec <lvrabec(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks| |1193552
Assignee|mgrepl(a)redhat.com |lvrabec(a)redhat.com
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1193552
[Bug 1193552] Missing selinux-policy manpages
--
You are receiving this mail because:
You are on the CC list for the bug.
11:39 a.m.
New subject: [Bug 1195804] docker run fails on rawhide with setenforce 1
https://bugzilla.redhat.com/show_bug.cgi?id=1195804
Colin Walters <walters(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks| |1194589
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1194589
[Bug 1194589] Atomic Host
--
You are receiving this mail because:
You are on the CC list for the bug.
1:23 p.m.
New subject: [Bug 1195804] docker run fails on rawhide with setenforce 1
https://bugzilla.redhat.com/show_bug.cgi?id=1195804
Lukas Vrabec <lvrabec(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks|1193552 |
--- Comment #2 from Lukas Vrabec <lvrabec(a)redhat.com> ---
New builds for Rawhide and F22 are available.
http://koji.fedoraproject.org/koji/buildinfo?buildID=615064
http://koji.fedoraproject.org/koji/buildinfo?buildID=615070
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1193552
[Bug 1193552] Missing selinux-policy manpages
--
You are receiving this mail because:
You are on the CC list for the bug.
11:31 p.m.
New subject: [Bug 1195804] docker run fails on rawhide with setenforce 1
https://bugzilla.redhat.com/show_bug.cgi?id=1195804
Pete Travis <me(a)petetravis.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |me(a)petetravis.com
--- Comment #3 from Pete Travis <me(a)petetravis.com> ---
These builds have been shipped, with several updates since. Is this bug open
for testing still, or has it just missed a bodhi tag?
--
You are receiving this mail because:
You are on the CC list for the bug.
4:36 a.m.
New subject: [Bug 1195804] docker run fails on rawhide with setenforce 1
https://bugzilla.redhat.com/show_bug.cgi?id=1195804
--- Comment #4 from Lukas Vrabec <lvrabec(a)redhat.com> ---
Probably missed bodhi tag.
I think this issue is resolved.
--
You are receiving this mail because:
You are on the CC list for the bug.
7:48 a.m.
New subject: [Bug 1195804] docker run fails on rawhide with setenforce 1
https://bugzilla.redhat.com/show_bug.cgi?id=1195804
Lokesh Mandvekar <lsm5(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|ASSIGNED |CLOSED
Resolution|--- |RAWHIDE
Last Closed| |2015-04-09 08:48:37
--- Comment #5 from Lokesh Mandvekar <lsm5(a)redhat.com> ---
ahh yes, this is resolved but no way to set bodhi for rawhide. I'll close this.
--
You are receiving this mail because:
You are on the CC list for the bug.
3309
days inactive
3353
days old
golang@lists.fedoraproject.org
8 comments
1 participants
participants (1)
-
Red Hat Bugzilla