OCI: SELinux Unable to relabel filesystem
Applies To:
Oracle Cloud Infrastructure
Linux x86-64
Symptoms:
Unable to login to the instance due to issues with selinux labels.
- Multiple "avc: denied" messages detected in the /var/log/audit/audit.log:
$ grep “avc: denied” /var/log/audit/audit.log type=AVC msg=audit(1739605970.862:33916): avc: denied { read } for pid=50118 comm="sshd" name="libpam.so.0" dev="dm-0" ino=68097146 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=0 type=AVC msg=audit(1739605970.862:33917): avc: denied { read } for pid=50118 comm="sshd" name="libpam.so.0" dev="dm-0" ino=68097146 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=0 type=AVC msg=audit(1739605970.862:33918): avc: denied { read } for pid=50118 comm="sshd" name="libpam.so.0" dev="dm-0" ino=68097146 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=0
Tagged:
0