On 1/25/26 10:49 AM, Paolo Galtieri wrote:
Folks,
 I just upgraded my system from F42 to F43.  The upgrade went fine, but when I logged into my system I started getting a lot of selinux alerts. It did stop after a while.  The alerts were the following:

time->Sun Jan 25 08:37:10 2026
type=AVC msg=audit(1769359030.005:1514): avc:  denied  { connectto } for  pid=40025 comm="blocking-1" path="/run/systemd/userdb/ io.systemd.Machine" scontext=unconfined_u:unconfined_r:thumb_t:s0- s0:c0.c1023 tcontext=system_u:system_r:systemd_machined_t:s0 tclass=unix_stream_socket permissive=0

I ran

sudo ausearch -m AVC -ts today | wc -l

the results was 3774 and that's just for today. Whatever process 40025 was it is no longer running and this is why the alerts stopped.

Anyone know what's going on?

Paolo

What does:

sudo audit2allow -al

tell you?

TC
--
_______________________________________________
users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to