Project

General

Profile

Actions
Copy link

Bug #37791

closed

websockify doesn't work with SELinux enabled

Added by Evgeni Golov 3 months ago. Updated 3 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Evgeni Golov
Category:
-
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
https://github.com/theforeman/foreman-selinux/pull/170, https://github.com/theforeman/foreman-selinux/pull/171
Fixed in Releases:
Foreman - 3.12.0, Foreman - 3.13.0
Found in Releases:
Foreman - 3.10.0, Foreman - 3.11.0, Foreman - 3.5.0, Foreman - 3.6.0, Foreman - 3.7.0, Foreman - 3.8.0, Foreman - 3.9.0
Red Hat JIRA:
SAT-27308

Description

time->Fri Sep  6 07:14:57 2024
type=PROCTITLE msg=audit(1725606897.320:500): proctitle=2F7573722F62696E2F707974686F6E33002F7573722F62696E2F776562736F636B696679002D2D6461656D6F6E002D2D69646C652D74696D656F75743D313230002D2D74696D656F75743D31323000353932370074616E736F2E657667656E692E7265646861742E636F6D3A35393030002D2D63657274002F6574632F706B69
type=SYSCALL msg=audit(1725606897.320:500): arch=c000003e syscall=42 success=no exit=-13 a0=8 a1=7ffcb24058b0 a2=10 a3=7fb5dc5199b9 items=0 ppid=4956 pid=4957 auid=4294967295 uid=990 gid=990 euid=990 suid=990 fsuid=990 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="websockify" exe="/usr/bin/python3.9" subj=system_u:system_r:foreman_rails_t:s0 key=(null)
type=AVC msg=audit(1725606897.320:500): avc:  denied  { name_connect } for  pid=4957 comm="websockify" dest=5900 scontext=system_u:system_r:foreman_rails_t:s0 tcontext=system_u:object_r:vnc_port_t:s0 tclass=tcp_socket permissive=0

Related issues 1 (0 open — 1 closed)

Related to Foreman - Refactor #29539: Unbundle websockifyClosedEwoud Kohl van WijngaardenActions
Actions
Copy link

Also available in: Atom PDF