bottlerocket-os / bottlerocket-os/bottlerocket

SELinux Policy: system_u:system_r:cachefiles_kernel_t:s0

Open
#4,081 6 comments 0 reactions 1 assignee Claimed by @bcressey View on GitHub
area/core status/blocked type/bug
Dominant language
Rust
Stars
9.7k
Forks
586
Avg merge
1d 11h
Merged PRs (30d)
11

Description

**What I'd like:**
I would like to enable fscache in order to allow caching of NFS files. Currently my issue is that on running cachefilesd I either receive:

```
About to bind cache
CacheFiles bind failed: errno 13 (Permission denied)
```

or

```
About to bind cache
CacheFiles bind failed: errno 22 (Invalid argument)
```

The last happens if I specify, which should be the correct selinux policy to reference

```
secctx system_u:system_r:cachefiles_kernel_t:s0
```

It looks like the policy is missing in bottlerocket os:

```
[root@admin]# seinfo -t | grep cache
cache_t
```

I appreciate if that policy could be added.

Related links:
* https://bugzilla.redhat.com/show_bug.cgi?id=841425

**Any alternatives you've considered:**

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.