Attachment 1006333 Details for Bug 1205693 – Sealert

Sealert

selinux.log (text/plain), 2.53 KB, created by Lukáš Hellebrandt on 2015-03-25 13:35:08 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Lukáš Hellebrandt

Created: 2015-03-25 13:35:08 UTC

Size: 2.53 KB

patch

obsolete

>found 3 alerts in /var/log/audit/audit.log
>--------------------------------------------------------------------------------
>
>SELinux is preventing /usr/sbin/qpidd from read access on the file /etc/rc.d/init.d/qpidd.
>
>*****  Plugin leaks (86.2 confidence) suggests  ******************************
>
>If you want to ignore qpidd trying to read access the qpidd file, because you believe it should not need this access.
>Then you should report this as a bug.  
>You can generate a local policy module to dontaudit this access.
>Do
># grep /usr/sbin/qpidd /var/log/audit/audit.log | audit2allow -D -M mypol
># semodule -i mypol.pp
>
>*****  Plugin catchall (14.7 confidence) suggests  ***************************
>
>If you believe that qpidd should be allowed read access on the qpidd file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep qpidd /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>
>--------------------------------------------------------------------------------
>
>SELinux is preventing /sbin/setfiles from read access on the file /etc/rc.d/init.d/qpidd.
>
>*****  Plugin leaks (86.2 confidence) suggests  ******************************
>
>If you want to ignore setfiles trying to read access the qpidd file, because you believe it should not need this access.
>Then you should report this as a bug.  
>You can generate a local policy module to dontaudit this access.
>Do
># grep /sbin/setfiles /var/log/audit/audit.log | audit2allow -D -M mypol
># semodule -i mypol.pp
>
>*****  Plugin catchall (14.7 confidence) suggests  ***************************
>
>If you believe that setfiles should be allowed read access on the qpidd file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep restorecon /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>
>--------------------------------------------------------------------------------
>
>SELinux is preventing /usr/bin/python from read access on the file /var/run/pulp/resource_manager.pid.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If you believe that python should be allowed read access on the resource_manager.pid file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep celery /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp

Actions: View

Attachments on bug 1205693: 1006327 | 1006328 | 1006332 | 1006333