setroubleshootd: write access to "system_bus_socket" ....?

[Tom London]

Running latest rawhide, targeted/enforcing.

Just started noticing this:

type=AVC msg=audit(1189383749.641:16): avc:  denied  { write } for
pid=3307 comm="setroubleshootd" name="system_bus_socket" dev=dm-0
ino=65933 scontext=system_u:system_r:setroubleshootd_t:s0
tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file
type=SYSCALL msg=audit(1189383749.641:16): arch=40000003 syscall=102
success=no exit=-13 a0=3 a1=bf980f90 a2=8c5474 a3=0 items=0 ppid=1
pid=3307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python"
subj=system_u:system_r:setroubleshootd_t:s0 key=(null)

[tbl at localhost ~]$ ls -lZ /var/run/dbus/system*
srwxrwxrwx  root root system_u:object_r:system_dbusd_var_run_t
/var/run/dbus/system_bus_socket
[tbl at localhost ~]$


tom
-- 
Tom London