Unable to generate local policies to fix SELinux denials on boot
Running Fedora Rawhide, I get several SELinux alerts on boot:
The source process: (upowerd)
Attempted this access: mounton
On this directory: upower
The source process: (upowerd)
Attempted this access: nnp_transition
On this process2 [sic]:
The source process: (fprintd)
Attempted this access: mounton
On this file: kallsyms
The source process: (fprintd)
Attempted this access: getattr
On this file: kcore
The source process: (fprintd)
Attempted this access: mounton
On this file: kcore
When I follow the steps to generate a local policy module and bypass these alerts, it fails. I get a "neverallow check failed" error message when trying to implement the policy (with sudo semodule -X 300 -i my-fprintd.pp, for example). I've never had this problem with SELinux before. How can I fix a neverallow check failing?
This is on KDE, if it makes a difference. I believe that's what kcore references.
kcoreis more likely the Kernel Core/proc/kcore.Showing the contents of
my-fprintd.temy be useful.As a user of Rawhide you are actually a tester and should therefore report any findings via bugzilla.