SELinux is giving me a lot of notifications

   289   1   0
User Avatar
Member
3 posts
Joined: Sept. 2019
Offline
Running on Fedora 43, Houdini Apprentice,latest prod. release - v21.

SELinux is throwing a lot of errors/notifications to me. I manage to get a lot of them under control, but I keep seeing the notifications & having some licensing issues:

1. Houdini keeps asking me to get an apprentice license after each system reboot.
2. Did what SELinux asked me to do:
 sudo ausearch -c 'sesinetd' --raw | audit2allow -M my-sesinetd; sudo semodule -X 300 -i my-sesinetd.pp 
. Followed advise given here https://www.sidefx.com/forum/topic/101793/ [www.sidefx.com] and looked up the issues posted in HelpDesk /FAQ.
Below is example of one of the notifications.

SELinux is preventing sesinetd from ioctl access on the file /root/houdini21.0/houdini.env.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that sesinetd should be allowed ioctl access on the houdini.env file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'sesinetd' --raw | audit2allow -M my-sesinetd
# semodule -X 300 -i my-sesinetd.pp

Additional Information:
Source Context                system_u:system_r:init_t:s0
Target Context                unconfined_u:object_r:admin_home_t:s0
Target Objects                /root/houdini21.0/houdini.env [ file ]
Source                        sesinetd
Source Path                   sesinetd
Port                          <Unknown>
Host                          fedora
Source RPM Packages           
Target RPM Packages           
SELinux Policy RPM            selinux-policy-targeted-42.22-1.fc43.noarch
Local Policy RPM              selinux-policy-targeted-42.22-1.fc43.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     fedora
Platform                      Linux fedora 6.18.7-200.fc43.x86_64 #1 SMP
                              PREEMPT_DYNAMIC Fri Jan 23 16:42:34 UTC 2026
                              x86_64
Alert Count                   1
First Seen                    2026-02-01 11:21:34 EST
Last Seen                     2026-02-01 11:21:34 EST
Local ID                      a0b3ebe2-cd4c-43ce-9fe3-e1b201a6cf63

Raw Audit Messages
type=AVC msg=audit(1769962894.322:103): avc:  denied  { ioctl } for  pid=1011 comm="sesinetd" path="/root/houdini21.0/houdini.env" dev="nvme0n1p3" ino=523730 ioctlcmd=0x542a scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file permissive=0


Hash: sesinetd,init_t,admin_home_t,file,ioctl

Thank you !
Edited by dorfman1 - Feb. 1, 2026 11:47:49
User Avatar
Member
18 posts
Joined: May 2016
Offline
Hi, I'm a basic Linux user and this issue bothered me for years. I eventually solved this issue by entering'permissive' mode.


Rocky Linux(and RHEL-based distros) are notoriously strict with SELinux, which is usually why there are so many issue with Houdini License Administrator remembering login details and license keys.


You can use temporary permissive mode with
sudo setenforce 0


Steps to Set Permanent Permissive Mode Using Nano (Be extremely careful)
sudo nano /etc/selinux/config

In the editor, look for the line that says SELINUX=enforcing and change it to SELINUX=permissive. (Use the arrow keys to navigate, and save with Ctrl+O, then Enter, and exit with Ctrl+X.)

Reboot your system for the change to take effect:
sudo reboot

After rebooting, verify the mode with sestatus or getenforce—it should show "Permissive".

If Houdini still throws errors post-change, check the audit logs (sudo ausearch -m avc -ts recent) for clues and consider generating a custom module to allow specific actions without broadly weakening SELinux.

I recently asked SideFX support for their feedback on this issue. Once I hear back from them I will update this post.
  • Quick Links