Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

k3s selinux issue #63

Open
cwrx777 opened this issue Jun 14, 2024 · 0 comments
Open

k3s selinux issue #63

cwrx777 opened this issue Jun 14, 2024 · 0 comments

Comments

@cwrx777
Copy link

cwrx777 commented Jun 14, 2024

k3s: v1.29.4+k3s1
k3s-selinux 1.5

I got this error when trying to run F5 NGINX ingress controller.

type=PROCTITLE msg=audit(1718353401.246:10299006): proctitle=2F7573722F7362696E2F6E67696E78002D76
type=SYSCALL msg=audit(1718353401.246:10299006): arch=c000003e syscall=10 success=no exit=-13 a0=7f248b40a000 a1=4000 a2=1 a3=7f248b261208 items=0 ppid=3968793 pid=3968810 auid=4294967295 uid=101 gid=101 euid=101 suid=101 fsuid=101 egid=101 sgid=101 fsgid=101 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:container_t:s0:c217,c459 key=(null)
type=AVC msg=audit(1718353401.246:10299006): avc:  denied  { read } for  pid=3968810 comm="nginx" path="/usr/lib/x86_64-linux-gnu/libc.so.6" dev="dm-10" ino=548935078 scontext=system_u:system_r:container_t:s0:c217,c459 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0

any idea why /usr/lib/x86_64-linux-gnu/libc.so.6 is unlabeled_t ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant