On Sat, 2020-01-11 at 19:28 -0800, Samuel Sieb wrote:
On 1/11/20 7:24 PM, Robert G (Doc) Savage via users wrote:
If you believe that 11-dhclient should be allowed getattr access on the 
hostname file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c '11-dhclient' --raw | audit2allow -M my-11dhclient
# semodule -X 300 -i my-11dhclient.pp21

That seems like a bug or something mislabeled.

Executing these two commands appears to have fixed the problem.

I suppose that will work, but it would have been better to solve the 
underlying problem.

If this is a bug, I believe it is caused by a problem in the major version upgrade process.

Remember, this system has been upgraded twice: F29 -> F30 Beta -> F31. I had very significant SELinux problems after the first upgrade to F30 Beta. I must have had a hundred "ausearch" errors I had to fix just like this one. At the suggestion of a friend, I was able to mass reset the contexts in the / filesystem. Had I done a from scratch install of F31, I don't think I would have encountered this problem. There may be more bugs lurking, but at least now I have a tool to ID and fix them.

--Doc Savage
Fairview Heights, IL