Re: [systemd-devel] [systemd SELinux] system status permission

2019-10-07 Thread Ian Pilcher
On 10/7/19 12:09 PM, Dominick Grift wrote: I tried it out with simple `systemctl status` Oct 07 19:04:21 myguest systemd[1]: Sent message type=method_return sender=org.freedesktop.systemd1 destination=n/a path=n/a interface=n/a member=n/a cookie=1 reply_cookie=1 signature=a{sv} error-name=n/a e

Re: [systemd-devel] [systemd SELinux] system status permission

2019-10-07 Thread Dominick Grift
On Mon, Oct 07, 2019 at 06:51:57PM +0200, Dominick Grift wrote: > On Mon, Oct 07, 2019 at 11:03:44AM -0500, Ian Pilcher wrote: > > I am hitting this (non-fatal) denial when reloading a service via the > > systemd dbus API: > > > > > type=USER_AVC msg=audit(1570462081.809:743): pid=1 uid=0 > > > au

Re: [systemd-devel] [systemd SELinux] system status permission

2019-10-07 Thread Dominick Grift
On Mon, Oct 07, 2019 at 11:03:44AM -0500, Ian Pilcher wrote: > I am hitting this (non-fatal) denial when reloading a service via the > systemd dbus API: > > > type=USER_AVC msg=audit(1570462081.809:743): pid=1 uid=0 > > auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 > > msg='avc:

[systemd-devel] [systemd SELinux] system status permission

2019-10-07 Thread Ian Pilcher
I am hitting this (non-fatal) denial when reloading a service via the systemd dbus API: type=USER_AVC msg=audit(1570462081.809:743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: denied { status } for auid=n/a uid=0 gid=1001 cmdline="/usr/bin/python2 /us