AVCs with unknown target path were described eg. as follows:
SELinux is preventing /usr/bin/dmesg from syslog_read access on the system Unknown.
* Plugin catchall (100. confidence) suggests
If you believe that dmesg should be allowed syslog_read access on the Unknown system by default.
Replace the confusing descriptions by:
SELinux is preventing /usr/bin/dmesg from syslog_read access on the system labeled system_label_t.
If you believe that dmesg should be allowed syslog_read access on the system labeled system_label_t by default.
The requirement for 3-tuple (catchall.py: 53) guarantees backwards compatibility with AVCs that are already in the setroubleshoot database.
Resolves: rhbz#1437772
1 new commit added
Both patches should be applied to master branch as well.
Merged
Pull-Request has been closed by plautrba
AVCs with unknown target path were described eg. as follows:
SELinux is preventing /usr/bin/dmesg from syslog_read access on the
system Unknown.
* Plugin catchall (100. confidence) suggests
If you believe that dmesg should be allowed syslog_read access on the
Unknown system by default.
Replace the confusing descriptions by:
SELinux is preventing /usr/bin/dmesg from syslog_read access on the
system labeled system_label_t.
* Plugin catchall (100. confidence) suggests
If you believe that dmesg should be allowed syslog_read access on the
system labeled system_label_t by default.
The requirement for 3-tuple (catchall.py: 53) guarantees backwards
compatibility with AVCs that are already in the setroubleshoot database.
Resolves: rhbz#1437772