SELinux is preventing ps from using the sys_admin capability

Ask Fedora
1

I have a fresh install of Kinoite 42 and am getting the following message in my logs:
“SELinux is preventing ps from using the sys_admin capability”
This message is preceded by:
“failed to retrieve rpm info for path ‘/etc/selinux/targeted/active/modules/200/pcp’”
These messages appear every 30 minutes, so often enough that it irritates me but not enough to overflow my logs.

I can use audit2allow to make this go away, but granting this to ps seems overkill. It seems to be related to Cockpit, which I am running. Is there a better solution and is this a bug I should report?

2

FYI I’m not an selinux expert.

You could try using fixfiles on /usr/bin/ps and see if anything changes.
See man fixfiles for how to use the command.

1 Like
3

Related thread on SELinux and Kinoite that can be of help Various SElinux denials in Fedora Kinoite (not specific to ps/cockpit).

1 Like