https://bugzilla.redhat.com/show_bug.cgi?id=1096123



--- Comment #32 from [email protected] ---
If I create a module with the selinux log in my last comment (Comment 31),
using  | audit2allow -M docker. And I load this module, I have this new Selinux
audit error after a new try with this cmd line «sudo  docker run -t -i
debian:6.0.9 /bin/bash» : 
type=SYSCALL msg=audit(2014-06-17 00:32:03.683:2289) : arch=x86_64
syscall=connect success=no exit=-13(Permission non accordée) a0=0x3
a1=0xc21005ac90 a2=0x17 a3=0x0 items=0 ppid=13456 pid=13458 auid=michael
uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root
ses=1 tty=pts1 comm=docker exe=/usr/bin/docker
subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) 
type=AVC msg=audit(2014-06-17 00:32:03.683:2289) : avc:  denied  { connectto }
for  pid=13458 comm=docker path=/run/docker.sock
scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_stream_socket 

The new output in stderr : 2014/06/17 00:35:32 Post
http:///var/run/docker.sock/v1.12/containers/create: dial unix
/var/run/docker.sock: permission denied

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
golang mailing list
[email protected]
https://lists.fedoraproject.org/mailman/listinfo/golang

Reply via email to