rsync/ssh/selinux

[Daniel J Walsh]

William John Murray wrote:
>   Hello all,
>            I am using rsync  -e ssh as a backup from a laptop to a
> desktop. This seems to work, but generates selinux denials. These
> need the following addition in local.te:
> 
> module local 1.0;
> 
> require {
> 	type sshd_t;
> 	type crond_t;
> 	class key search;
> }
> 
> This seems to me a fairly straightforward thing. Should it not be
> allowed in the main policy? Can we change this?
>    Bill
> 
> 
> 
> 
This is caused by a bug in the kernel.  You can allow or dontaudit it,
hopefully we will get a new kernel with a fix.  Nothing real is being
denied.