AVC on "setattr" popping up for some custom script when keepalived service starts
Issue
-
When the
keepalived
has a configuration with a custom script stored in/usr/libexec/keepalived
, the following AVC pops up when the service is started/restartedtype=PROCTITLE msg=audit(10/17/2023 15:18:27.325:319) : proctitle=/usr/sbin/keepalived --dont-fork -D type=SYSCALL msg=audit(10/17/2023 15:18:27.325:319) : arch=x86_64 syscall=utimensat success=no exit=EACCES(Permission denied) [...] comm=keepalived exe=/usr/sbin/keepalived subj=system_u:system_r:keepalived_t:s0 key=(null) type=AVC msg=audit(10/17/2023 15:18:27.325:319) : avc: denied { setattr } for pid=3140 comm=keepalived name=SOMESCRIPT.sh [...] scontext=system_u:system_r:keepalived_t:s0 tcontext=system_u:object_r:keepalived_unconfined_script_exec_t:s0 tclass=file permissive=0
Environment
- Red Hat Enterprise Linux 9
- keepalived
- SELinux
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.