SELinux getattr denied messages for /var/openshift/quota.user when /var/openshift is on separate file system
Issue
Since we activated SELinux we observe following messages in /var/log/messages:
Oct 21 15:07:01 NODE-01 kernel: type=1400 audit(1382360821.687:169637): avc: denied { getattr } for pid=6608 comm="ruby" path="/var/lib/openshift/aquota.user" dev=dm-9 ino=12 scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:quota_db_t:s0 tclass=file
Those messages seems to be generated each time openshift cron jobs are executed.
Environment
- OpenShift Enterprise 1.2
selinux-policy-targeted-3.7.19-195.el6_4.12.noarch
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
