SELinux is preventing systemd-tmpfile from getattr access on the directory /proc/pressure

Ask Fedora
1

I’m getting the following SELinux alert:

Additional Information:
Source Context system_u:system_r:systemd_tmpfiles_t:s0
Target Context system_u:object_r:proc_psi_t:s0
Target Objects /proc/pressure [ dir ]
Source systemd-tmpfile
Source Path systemd-tmpfile
Port
Host localhost
Source RPM Packages
Target RPM Packages
SELinux Policy RPM selinux-policy-targeted-44.7-1.fc44.noarch
Local Policy RPM selinux-policy-targeted-44.7-1.fc44.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name localhost
Platform Linux localhost 7.1.10-200.fc44.x86_64 #1 SMP
PREEMPT_DYNAMIC Sun Aug 23 16:15:11 UTC 2026
x86_64
Alert Count 8
First Seen 2026-08-26 22:46:48 EDT
Last Seen 2026-08-28 20:29:22 EDT
Local ID ed1118dc-12f5-45a5-bec5-c3bcebadbc0a

Raw Audit Messages
type=AVC msg=audit(1787963362.970:201): avc: denied { getattr } for pid=6078 comm=“systemd-tmpfile” path=“/proc/pressure” dev=“proc” ino=4026532069 scontext=system_u:system_r:systemd_tmpfiles_t:s0 tcontext=system_u:object_r:proc_psi_t:s0 tclass=dir permissive=0

Hash: systemd-tmpfile,systemd_tmpfiles_t,proc_psi_t,dir,getattr

I know I can allow access to this using semodule, but this is a new development, so I wanted to check if anyone else is getting this, or if anyone knows the cause.
Should I put in a bug report to get this resolved?

2

Yes, please, file a bug report against SELinux

3

Thanks for the reply, Bugzilla report has been submitted: 2525821 – SELinux is preventing systemd-tmpfile from getattr access on the directory /proc/pressure
Hopefully I filled this out correctly, please let me know if any additional information is required.