Displaying 1 result from an estimated 1 matches for "tmpreaper_t".
Did you mean:
tmpreaper
2020 Aug 28
2
EL8: SElinux / dac_override / tmpwatch
...mpwatch -umc $dir" to clean some directories
(/etc/cron.daily/tmpwatch). It seems that this triggers this AVC
(SElinux mode is enforcing):
type=AVC msg=audit(1598576896.772:4267): avc: denied { dac_override }
for pid=11013 comm="tmpwatch" capability=1
scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023
tcontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tclass=capability
permissive=0
The tmpwatch exec line had "--force" before and I was hopping that this
"capability" was the cause and deleted it but this night the AVC are
still appearing.
Is cron running...