Pcp Selinux Fault after new selinux policy is installed

Ask Fedora
1 
System:
  Host: TWorkstation Kernel: 6.12.21-cachylts1.lto.fc41.x86_64 arch: x86_64
    bits: 64
  Desktop: KDE Plasma v: 6.3.4 Distro: Fedora Linux 41 (Forty One)

This morning after regular periodic updates, my system often show alerts about the pmdalinux.

  dnf5 history info
  Replaced selinux-policy-0:41.34-1.fc41.noarch                            External User   @System
  Replaced selinux-policy-targeted-0:41.34-1.fc41.noarch                   External User   @System

journalctl --no-pager -b _AUDIT_TYPE_NAME=AVC
Apr 13 22:24:05 TWorkstation audit[3253]: AVC avc:  denied  { search } for  pid=3253 comm="pmdalinux" name="pressure" dev="proc" ino=4026532074 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:proc_psi_t:s0 tclass=dir permissive=0
Apr 13 22:25:05 TWorkstation audit[3253]: AVC avc:  denied  { search } for  pid=3253 comm="pmdalinux" name="pressure" dev="proc" ino=4026532074 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:proc_psi_t:s0 tclass=dir permissive=0
Apr 13 22:25:05 TWorkstation audit[3253]: AVC avc:  denied  { search } for  pid=3253 comm="pmdalinux" name="pressure" dev="proc" ino=4026532074 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:proc_psi_t:s0 tclass=dir permissive=0
Apr 13 22:25:05 TWorkstation audit[3253]: AVC avc:  denied  { search } for  pid=3253 comm="pmdalinux" name="pressure" dev="proc" ino=4026532074 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:proc_psi_t:s0 tclass=dir permissive=0
Apr 13 22:25:05 TWorkstation audit[3253]: AVC avc:  denied  { search } for  pid=3253 comm="pmdalinux" name="pressure" dev="proc" ino=4026532074 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:proc_psi_t:s0 tclass=dir permissive=0

Anyone know how to solve this issue or it this merely a regression?

Now i have to manually disable pmcd.service to suppress alerted selinux warnings.

4

I just saw another report of the same problem.[1] It must be a regression. It should probably be reported.

  1. ↩︎

1 Like