Bug #37791: websockify doesn't work with SELinux enabled - SELinux - Foreman

Actions

Copy link

Bug #37791

closed

websockify doesn't work with SELinux enabled

Added by Evgeni Golov 3 months ago. Updated 3 months ago.

Status:

Closed

Priority:

Normal

Assignee:

Evgeni Golov

Category:

Target version:

Difficulty:

Triaged:

Bugzilla link:

Pull request:

https://github.com/theforeman/foreman-selinux/pull/170, https://github.com/theforeman/foreman-selinux/pull/171

Fixed in Releases:

Foreman - 3.12.0, Foreman - 3.13.0

Found in Releases:

Foreman - 3.10.0, Foreman - 3.11.0, Foreman - 3.5.0, Foreman - 3.6.0, Foreman - 3.7.0, Foreman - 3.8.0, Foreman - 3.9.0

Red Hat JIRA:

SAT-27308

Description

time->Fri Sep  6 07:14:57 2024
type=PROCTITLE msg=audit(1725606897.320:500): proctitle=2F7573722F62696E2F707974686F6E33002F7573722F62696E2F776562736F636B696679002D2D6461656D6F6E002D2D69646C652D74696D656F75743D313230002D2D74696D656F75743D31323000353932370074616E736F2E657667656E692E7265646861742E636F6D3A35393030002D2D63657274002F6574632F706B69
type=SYSCALL msg=audit(1725606897.320:500): arch=c000003e syscall=42 success=no exit=-13 a0=8 a1=7ffcb24058b0 a2=10 a3=7fb5dc5199b9 items=0 ppid=4956 pid=4957 auid=4294967295 uid=990 gid=990 euid=990 suid=990 fsuid=990 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="websockify" exe="/usr/bin/python3.9" subj=system_u:system_r:foreman_rails_t:s0 key=(null)
type=AVC msg=audit(1725606897.320:500): avc:  denied  { name_connect } for  pid=4957 comm="websockify" dest=5900 scontext=system_u:system_r:foreman_rails_t:s0 tcontext=system_u:object_r:vnc_port_t:s0 tclass=tcp_socket permissive=0

Related issues 1 (0 open — 1 closed)