bottlerocket icon indicating copy to clipboard operation
bottlerocket copied to clipboard

SELinux Policy: system_u:system_r:cachefiles_kernel_t:s0

Open woehrl01 opened this issue 7 months ago • 2 comments

What I'd like: I would like to enable fscache in order to allow caching of NFS files. Currently my issue is that on running cachefilesd I either receive:

About to bind cache
CacheFiles bind failed: errno 13 (Permission denied)

or

About to bind cache
CacheFiles bind failed: errno 22 (Invalid argument)

The last happens if I specify, which should be the correct selinux policy to reference

secctx system_u:system_r:cachefiles_kernel_t:s0

It looks like the policy is missing in bottlerocket os:

[root@admin]# seinfo -t | grep cache
   cache_t

I appreciate if that policy could be added.

Related links:

  • https://bugzilla.redhat.com/show_bug.cgi?id=841425

Any alternatives you've considered:

woehrl01 avatar Jul 08 '24 14:07 woehrl01