selinux issues running the pods
- Dominant language
- Shell
- Stars
- 625
- Forks
- 231
- PR merge metrics
- No merged PRs in 30d
Description
(Podman, Fedora 37).
I'm trying to run the basic example, using 'podman run' (instead of 'docker run'). It doesn't work and I'm trying to slowly address issues. At least one of them is related to selinux (maybe something I need to fix on my side!):
```
Feb 02 13:00:09 ykaul audisp-syslog[1601]: type=AVC msg=audit(1675335609.187:451): avc: denied { ioctl } for pid=18412 comm="sirmordred" path="/home/grimoire/conf/setup.cfg" dev="dm-3" ino=9716465 ioctlcmd=0x5401 scontext=system_u:system_r:container_t:s0:c841,c917 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
Feb 02 13:00:09 ykaul audisp-syslog[1601]: type=AVC msg=audit(1675335609.187:450): avc: denied { open } for pid=18412 comm="sirmordred" path="/home/grimoire/conf/setup.cfg" dev="dm-3" ino=9716465 scontext=system_u:system_r:container_t:s0:c841,c917 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
Feb 02 13:00:09 ykaul audisp-syslog[1601]: type=AVC msg=audit(1675335609.187:449): avc: denied { read } for pid=18412 comm="sirmordred" name="setup-docker.cfg" dev="dm-3" ino=9716465 scontext=system_u:system_r:container_t:s0:c841,c917 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
Feb 02 13:00:09 ykaul audit[18412]: AVC avc: denied { ioctl } for pid=18412 comm="sirmordred" path="/home/grimoire/conf/setup.cfg" dev="dm-3" ino=9716465 ioctlcmd=0x5401 scontext=system_u:system_r:container_t:s0:c841,c917 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
Feb 02 13:00:09 ykaul audit[18412]: AVC avc: denied { open } for pid=18412 comm="sirmordred" path="/home/grimoire/conf/setup.cfg" dev="dm-3" ino=9716465 scontext=system_u:system_r:container_t:s0:c841,c917 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
Feb 02 13:00:09 ykaul audit[18412]: AVC avc: denied { read } for pid=18412 comm="sirmordred" name="setup-docker.cfg" dev="dm-3" ino=9716465 scontext=system_u:system_r:container_t:s0:c841,c917 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
```
Contributor guide
Assessment
This issue has not been assessed yet.