[SSSD-users] Re: AVC alerts for process working in /var/lib/sss

[Brian J. Murrell]

> Hi,

Hi.
> What OS are running on your system?

EL8.5
> What is the output of `cat /etc/nsswitch.conf | grep passwd` on your
> system?

passwd:     sss files systemd
> Do you use SSSD on purpose?

Yes.  I use FreeIPA here.

So it's not at all surprising to see these /var/lib/sss accesses.  I
just want to understand what they might be for and why nothing is
(apparently) breaking due to the accesses being denied, and if that's a
condition that can continue to happen without there being some future
fall-out.  I.e. what is the result of those accesses being denied
instead of being allowed?

Cheers,
b.