New subject: [Bug 1195804] docker run fails on rawhide with setenforce 1

24 Feb 2015


      https://bugzilla.redhat.com/show_bug.cgi?id=1195804
Bug ID: 1195804
           Summary: docker run fails on rawhide with setenforce 1
           Product: Fedora
           Version: rawhide
         Component: docker-io
          Assignee: lsm5@redhat.com
          Reporter: lsm5@redhat.com
        QA Contact: extras-qa@fedoraproject.org
                CC: adimania@gmail.com, admiller@redhat.com,
                    golang@lists.fedoraproject.org, hushan.jia@gmail.com,
                    jchaloup@redhat.com, jperrin@centos.org,
                    lsm5@redhat.com, mattdm@redhat.com,
                    mgoldman@redhat.com, miminar@redhat.com, s@shk.io,
                    thrcka@redhat.com, vbatts@redhat.com
Description of problem:
On rawhide, docker run commands fail with selinux enforcing.
Feb 24 09:34:01 naruto kernel: [605832.428983] audit: type=1400
audit(1424792041.549:3572): avc:  denied  { entrypoint } for  pid=19015
comm="docker" path="/var/lib/docker/init/dockerinit-1.5.0-dev" dev="sda2"
ino=134594 scontext=system_u:system_r:spc_t:s0
tcontext=system_u:object_r:docker_var_lib_t:s0 tclass=file permissive=0
Feb 24 09:34:01 naruto kernel: [605832.429083] audit: type=1300
audit(1424792041.549:3572): arch=c000003e syscall=59 success=no exit=-13
a0=c208b05290 a1=c208602500 a2=c2085ceb20 a3=0 items=0 ppid=7465 pid=19015
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
tty=(none) ses=4294967295 comm="docker" exe="/usr/bin/docker"
subj=system_u:system_r:docker_t:s0 key=(null)
Feb 24 09:34:01 naruto kernel: [605832.429110] audit: type=1327
audit(1424792041.549:3572):
proctitle=2F7573722F62696E2F646F636B6572002D64002D2D73656C696E75782D656E61626C6564
-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1195804] New: docker run fails on rawhide with setenforce 1