AVC denials with dac_read_search and dac_override for hostname and some other commands
Issue
The following AVCs denials were reported for the hostname
command and some other commands.
type=AVC msg=audit(xxxxx): avc: denied { dac_read_search } for pid=2000 comm="hostname" capability=2 scontext=system_u:system_r:hostname_t:s0 tcontext=system_u:system_r:hostname_t:s0 tclass=capability permissive=0
type=AVC msg=audit(xxxxx): avc: denied { dac_override } for pid=2000 comm="hostname" capability=1 scontext=system_u:system_r:hostname_t:s0 tcontext=system_u:system_r:hostname_t:s0 tclass=capability permissive=0
Environment
Red Hat Enterprise Linux 8
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.