selinux

SELinux is preventing (dnf4) from entrypoint access on the file /usr/bin/dnf5.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that (dnf4) should be allowed entrypoint access on the dnf5 file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c '(dnf4)' --raw | audit2allow -M my-dnf4
# semodule -X 300 -i my-dnf4.pp

Additional Information:
Source Context                unconfined_u:unconfined_r:unconfined_t:s0-
                              s0:c0.c1023
Target Context                system_u:object_r:rpm_exec_t:s0
Target Objects                /usr/bin/dnf5 [ file ]
Source                        (dnf4)
Source Path                   (dnf4)
Port                          <Unknown>
Host                          thinkpad
Source RPM Packages
Target RPM Packages           dnf5-5.2.12.0-2.fc42.x86_64
SELinux Policy RPM            selinux-policy-targeted-41.36-1.fc42.noarch
Local Policy RPM              selinux-policy-targeted-41.36-1.fc42.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     thinkpad
Platform                      Linux thinkpad
                              6.14.2-300.fc42.x86_64 #1 SMP PREEMPT_DYNAMIC Thu
                              Apr 10 21:50:55 UTC 2025 x86_64
Alert Count                   10
First Seen                    2025-01-30 11:23:28 EST
Last Seen                     2025-04-15 12:16:09 EDT
Local ID                      e7f36bbb-2dee-4b9c-86e3-76e7994fa499

Raw Audit Messages
type=AVC msg=audit(1744733769.238:318): avc:  denied  { entrypoint } for  pid=12651 comm="(dnf)" path="/usr/bin/dnf5" dev="dm-0" ino=14053400 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=0


Hash: (dnf4),unconfined_t,rpm_exec_t,file,entrypoint