Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 145628 Details for
Bug 221718
avc: denied { write } for pid=1806 comm="mount.ntfs-3g" name="fuse" dev=tmpfs ino=1732 scontext=system_u:system_r:mount_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=chr_file
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
selinux_alert.txt
selinux_alert.txt (text/plain), 42.31 KB, created by
Erik Sohns
on 2007-01-15 22:56:12 UTC
(
hide
)
Description:
selinux_alert.txt
Filename:
MIME Type:
Creator:
Erik Sohns
Created:
2007-01-15 22:56:12 UTC
Size:
42.31 KB
patch
obsolete
>Summary > SELinux is preventing mount.ntfs-3g (mount_t) "write" to fuse > (fixed_disk_device_t). > >Detailed Description > SELinux denied access requested by mount.ntfs-3g. It is not expected that > this access is required by mount.ntfs-3g and this access may signal an > intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for fuse, restorecon -v fuse If this > does not work, there is currently no automatic way to allow this access. > Instead, you can generate a local policy module to allow this access - see > http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable > SELinux protection altogether. Disabling SELinux protection is not > recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi > against this package. > >Additional Information > >Source Context system_u:system_r:mount_t >Target Context system_u:object_r:fixed_disk_device_t >Target Objects fuse [ chr_file ] >Affected RPM Packages >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 184 >Line Numbers > >Raw Audit Messages > >avc: denied { write } for comm="mount.ntfs-3g" dev=tmpfs name="fuse" pid=1991 >scontext=system_u:system_r:mount_t:s0 tclass=chr_file >tcontext=system_u:object_r:fixed_disk_device_t:s0 > > >Summary > SELinux is preventing mount.ntfs-3g (mount_t) "read" to fuse > (fixed_disk_device_t). > >Detailed Description > SELinux denied access requested by mount.ntfs-3g. It is not expected that > this access is required by mount.ntfs-3g and this access may signal an > intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for fuse, restorecon -v fuse If this > does not work, there is currently no automatic way to allow this access. > Instead, you can generate a local policy module to allow this access - see > http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable > SELinux protection altogether. Disabling SELinux protection is not > recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi > against this package. > >Additional Information > >Source Context system_u:system_r:mount_t >Target Context system_u:object_r:fixed_disk_device_t >Target Objects fuse [ chr_file ] >Affected RPM Packages >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 184 >Line Numbers > >Raw Audit Messages > >avc: denied { read } for comm="mount.ntfs-3g" dev=tmpfs name="fuse" pid=1991 >scontext=system_u:system_r:mount_t:s0 tclass=chr_file >tcontext=system_u:object_r:fixed_disk_device_t:s0 > > >Summary > SELinux prevented /usr/bin/fusermount from mounting on the file or directory > "mtab.fuselock" (type "etc_t"). > >Detailed Description > SELinux prevented /usr/bin/fusermount from mounting a filesystem on the file > or directory "mtab.fuselock" of type "etc_t". By default SELinux limits the > mounting of filesystems to only some files or directories (those with types > that have the mountpoint attribute). The type "etc_t" does not have this > attribute. You can either relabel the file or directory or set the boolean > "allow_mount_anyfile" to true to allow mounting on any file or directory. > >Allowing Access > Changing the "allow_mount_anyfile" boolean to true will allow this access: > "setsebool -P allow_mount_anyfile=1." > > The following command will allow this access: > setsebool -P allow_mount_anyfile=1 > >Additional Information > >Source Context system_u:system_r:mount_t >Target Context system_u:object_r:etc_t >Target Objects mtab.fuselock [ file ] >Affected RPM Packages fuse-2.6.1-1.fc6 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.allow_mount_anyfile >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 2 >Line Numbers > >Raw Audit Messages > >avc: denied { write } for comm="fusermount" dev=dm-0 egid=0 euid=0 >exe="/usr/bin/fusermount" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 >name="mtab.fuselock" pid=11364 scontext=system_u:system_r:mount_t:s0 sgid=0 >subj=system_u:system_r:mount_t:s0 suid=0 tclass=file >tcontext=system_u:object_r:etc_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /usr/bin/fusermount (mount_t) "unmount" to <Unknown> > (unlabeled_t). > >Detailed Description > SELinux denied access requested by /usr/bin/fusermount. It is not expected > that this access is required by /usr/bin/fusermount and this access may > signal an intrusion attempt. It is also possible that the specific version > or configuration of the application is causing it to require additional > access. > >Allowing Access > You can generate a local policy module to allow this access - see > http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable > SELinux protection altogether. Disabling SELinux protection is not > recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi > against this package. > >Additional Information > >Source Context system_u:system_r:mount_t >Target Context system_u:object_r:unlabeled_t >Target Objects None [ filesystem ] >Affected RPM Packages fuse-2.6.1-1.fc6 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 2 >Line Numbers > >Raw Audit Messages > >avc: denied { unmount } for comm="fusermount" egid=0 euid=0 >exe="/usr/bin/fusermount" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 pid=11364 >scontext=system_u:system_r:mount_t:s0 sgid=0 subj=system_u:system_r:mount_t:s0 >suid=0 tclass=filesystem tcontext=system_u:object_r:unlabeled_t:s0 tty=(none) >uid=0 > > >Summary > SELinux is preventing /usr/sbin/setsebool (semanage_t) "read" to inotify > (inotifyfs_t). > >Detailed Description > SELinux denied access requested by /usr/sbin/setsebool. It is not expected > that this access is required by /usr/sbin/setsebool and this access may > signal an intrusion attempt. It is also possible that the specific version > or configuration of the application is causing it to require additional > access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for inotify, restorecon -v inotify > If this does not work, there is currently no automatic way to allow this > access. Instead, you can generate a local policy module to allow this > access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you > can disable SELinux protection altogether. Disabling SELinux protection is > not recommended. Please file a > http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package. > >Additional Information > >Source Context system_u:system_r:semanage_t >Target Context system_u:object_r:inotifyfs_t >Target Objects inotify [ dir ] >Affected RPM Packages policycoreutils-1.33.6-3.fc6 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 12 >Line Numbers > >Raw Audit Messages > >avc: denied { read } for comm="setsebool" dev=inotifyfs egid=0 euid=0 >exe="/usr/sbin/setsebool" exit=0 fsgid=0 fsuid=0 gid=0 items=0 name="inotify" >path="inotify" pid=4069 scontext=system_u:system_r:semanage_t:s0 sgid=0 >subj=system_u:system_r:semanage_t:s0 suid=0 tclass=dir >tcontext=system_u:object_r:inotifyfs_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /usr/sbin/prelink (prelink_t) "relabelto" to > antivir.#prelink#.whSxjl (initrc_tmp_t). > >Detailed Description > SELinux denied access requested by /usr/sbin/prelink. It is not expected > that this access is required by /usr/sbin/prelink and this access may signal > an intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for antivir.#prelink#.whSxjl, > restorecon -v antivir.#prelink#.whSxjl If this does not work, there is > currently no automatic way to allow this access. Instead, you can generate > a local policy module to allow this access - see > http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable > SELinux protection altogether. Disabling SELinux protection is not > recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi > against this package. > >Additional Information > >Source Context system_u:system_r:prelink_t:SystemLow-SystemHigh >Target Context system_u:object_r:initrc_tmp_t >Target Objects antivir.#prelink#.whSxjl [ file ] >Affected RPM Packages prelink-0.3.9-2 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { relabelto } for comm="prelink" dev=dm-0 egid=0 euid=0 >exe="/usr/sbin/prelink" exit=0 fsgid=0 fsuid=0 gid=0 items=0 >name="antivir.#prelink#.whSxjl" pid=11871 >scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 sgid=0 >subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 suid=0 tclass=file >tcontext=system_u:object_r:initrc_tmp_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /usr/sbin/prelink (prelink_t) "unlink" to antivir > (initrc_tmp_t). > >Detailed Description > SELinux denied access requested by /usr/sbin/prelink. It is not expected > that this access is required by /usr/sbin/prelink and this access may signal > an intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for antivir, restorecon -v antivir > If this does not work, there is currently no automatic way to allow this > access. Instead, you can generate a local policy module to allow this > access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you > can disable SELinux protection altogether. Disabling SELinux protection is > not recommended. Please file a > http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package. > >Additional Information > >Source Context system_u:system_r:prelink_t:SystemLow-SystemHigh >Target Context system_u:object_r:initrc_tmp_t >Target Objects antivir [ file ] >Affected RPM Packages prelink-0.3.9-2 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { unlink } for comm="prelink" dev=dm-0 egid=0 euid=0 >exe="/usr/sbin/prelink" exit=0 fsgid=0 fsuid=0 gid=0 items=0 name="antivir" >pid=11871 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 sgid=0 >subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 suid=0 tclass=file >tcontext=system_u:object_r:initrc_tmp_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /usr/sbin/prelink (prelink_t) "read" to starfighter > (usr_t). > >Detailed Description > SELinux denied access requested by /usr/sbin/prelink. It is not expected > that this access is required by /usr/sbin/prelink and this access may signal > an intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for starfighter, restorecon -v > starfighter If this does not work, there is currently no automatic way to > allow this access. Instead, you can generate a local policy module to allow > this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 > Or you can disable SELinux protection altogether. Disabling SELinux > protection is not recommended. Please file a > http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package. > >Additional Information > >Source Context system_u:system_r:prelink_t:SystemLow-SystemHigh >Target Context system_u:object_r:usr_t >Target Objects starfighter [ file ] >Affected RPM Packages prelink-0.3.9-2 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { read } for comm="prelink" dev=dm-0 egid=0 euid=0 >exe="/usr/sbin/prelink" exit=3 fsgid=0 fsuid=0 gid=0 items=0 name="starfighter" >pid=11871 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 sgid=0 >subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 suid=0 tclass=file >tcontext=system_u:object_r:usr_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /lib/ld-2.5.so (prelink_t) "execute" to > /usr/games/starfighter (usr_t). > >Detailed Description > SELinux denied access requested by /lib/ld-2.5.so. It is not expected that > this access is required by /lib/ld-2.5.so and this access may signal an > intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for /usr/games/starfighter, > restorecon -v /usr/games/starfighter If this does not work, there is > currently no automatic way to allow this access. Instead, you can generate > a local policy module to allow this access - see > http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable > SELinux protection altogether. Disabling SELinux protection is not > recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi > against this package. > >Additional Information > >Source Context system_u:system_r:prelink_t:SystemLow-SystemHigh >Target Context system_u:object_r:usr_t >Target Objects /usr/games/starfighter [ file ] >Affected RPM Packages glibc-2.5-10.fc6 > [application]starfighter-1.1-8.fc6 [target] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { execute } for comm="ld-linux.so.2" dev=dm-0 egid=0 euid=0 >exe="/lib/ld-2.5.so" exit=134508544 fsgid=0 fsuid=0 gid=0 items=0 >name="starfighter" path="/usr/games/starfighter" pid=18123 >scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 sgid=0 >subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 suid=0 tclass=file >tcontext=system_u:object_r:usr_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /usr/sbin/prelink (prelink_t) "create" to > starfighter.#prelink#.uazX3X (usr_t). > >Detailed Description > SELinux denied access requested by /usr/sbin/prelink. It is not expected > that this access is required by /usr/sbin/prelink and this access may signal > an intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for starfighter.#prelink#.uazX3X, > restorecon -v starfighter.#prelink#.uazX3X If this does not work, there is > currently no automatic way to allow this access. Instead, you can generate > a local policy module to allow this access - see > http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable > SELinux protection altogether. Disabling SELinux protection is not > recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi > against this package. > >Additional Information > >Source Context system_u:system_r:prelink_t:SystemLow-SystemHigh >Target Context system_u:object_r:usr_t >Target Objects starfighter.#prelink#.uazX3X [ file ] >Affected RPM Packages prelink-0.3.9-2 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { create } for comm="prelink" egid=0 euid=0 exe="/usr/sbin/prelink" >exit=4 fsgid=0 fsuid=0 gid=0 items=0 name="starfighter.#prelink#.uazX3X" >pid=11871 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 sgid=0 >subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 suid=0 tclass=file >tcontext=system_u:object_r:usr_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /usr/sbin/prelink (prelink_t) "write" to > starfighter.#prelink#.uazX3X (usr_t). > >Detailed Description > SELinux denied access requested by /usr/sbin/prelink. It is not expected > that this access is required by /usr/sbin/prelink and this access may signal > an intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for starfighter.#prelink#.uazX3X, > restorecon -v starfighter.#prelink#.uazX3X If this does not work, there is > currently no automatic way to allow this access. Instead, you can generate > a local policy module to allow this access - see > http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable > SELinux protection altogether. Disabling SELinux protection is not > recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi > against this package. > >Additional Information > >Source Context system_u:system_r:prelink_t:SystemLow-SystemHigh >Target Context system_u:object_r:usr_t >Target Objects starfighter.#prelink#.uazX3X [ file ] >Affected RPM Packages prelink-0.3.9-2 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { write } for comm="prelink" dev=dm-0 egid=0 euid=0 >exe="/usr/sbin/prelink" exit=0 fsgid=0 fsuid=0 gid=0 items=0 >name="starfighter.#prelink#.uazX3X" pid=11871 >scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 sgid=0 >subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 suid=0 tclass=file >tcontext=system_u:object_r:usr_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /usr/sbin/prelink (prelink_t) "setattr" to > starfighter.#prelink#.uazX3X (usr_t). > >Detailed Description > SELinux denied access requested by /usr/sbin/prelink. It is not expected > that this access is required by /usr/sbin/prelink and this access may signal > an intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for starfighter.#prelink#.uazX3X, > restorecon -v starfighter.#prelink#.uazX3X If this does not work, there is > currently no automatic way to allow this access. Instead, you can generate > a local policy module to allow this access - see > http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable > SELinux protection altogether. Disabling SELinux protection is not > recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi > against this package. > >Additional Information > >Source Context system_u:system_r:prelink_t:SystemLow-SystemHigh >Target Context system_u:object_r:usr_t >Target Objects starfighter.#prelink#.uazX3X [ file ] >Affected RPM Packages prelink-0.3.9-2 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { setattr } for comm="prelink" dev=dm-0 egid=0 euid=0 >exe="/usr/sbin/prelink" exit=0 fsgid=0 fsuid=0 gid=0 items=0 >name="starfighter.#prelink#.uazX3X" pid=11871 >scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 sgid=0 >subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 suid=0 tclass=file >tcontext=system_u:object_r:usr_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /usr/sbin/prelink (prelink_t) "unlink" to starfighter > (usr_t). > >Detailed Description > SELinux denied access requested by /usr/sbin/prelink. It is not expected > that this access is required by /usr/sbin/prelink and this access may signal > an intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for starfighter, restorecon -v > starfighter If this does not work, there is currently no automatic way to > allow this access. Instead, you can generate a local policy module to allow > this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 > Or you can disable SELinux protection altogether. Disabling SELinux > protection is not recommended. Please file a > http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package. > >Additional Information > >Source Context system_u:system_r:prelink_t:SystemLow-SystemHigh >Target Context system_u:object_r:usr_t >Target Objects starfighter [ file ] >Affected RPM Packages prelink-0.3.9-2 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { unlink } for comm="prelink" dev=dm-0 egid=0 euid=0 >exe="/usr/sbin/prelink" exit=0 fsgid=0 fsuid=0 gid=0 items=0 name="starfighter" >pid=11871 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 sgid=0 >subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 suid=0 tclass=file >tcontext=system_u:object_r:usr_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /usr/sbin/prelink (prelink_t) "relabelto" to > starfighter.#prelink#.uazX3X (usr_t). > >Detailed Description > SELinux denied access requested by /usr/sbin/prelink. It is not expected > that this access is required by /usr/sbin/prelink and this access may signal > an intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for starfighter.#prelink#.uazX3X, > restorecon -v starfighter.#prelink#.uazX3X If this does not work, there is > currently no automatic way to allow this access. Instead, you can generate > a local policy module to allow this access - see > http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable > SELinux protection altogether. Disabling SELinux protection is not > recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi > against this package. > >Additional Information > >Source Context system_u:system_r:prelink_t:SystemLow-SystemHigh >Target Context system_u:object_r:usr_t >Target Objects starfighter.#prelink#.uazX3X [ file ] >Affected RPM Packages prelink-0.3.9-2 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { relabelto } for comm="prelink" dev=dm-0 egid=0 euid=0 >exe="/usr/sbin/prelink" exit=0 fsgid=0 fsuid=0 gid=0 items=0 >name="starfighter.#prelink#.uazX3X" pid=11871 >scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 sgid=0 >subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 suid=0 tclass=file >tcontext=system_u:object_r:usr_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /usr/sbin/prelink (prelink_t) "read" to antivir > (initrc_tmp_t). > >Detailed Description > SELinux denied access requested by /usr/sbin/prelink. It is not expected > that this access is required by /usr/sbin/prelink and this access may signal > an intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for antivir, restorecon -v antivir > If this does not work, there is currently no automatic way to allow this > access. Instead, you can generate a local policy module to allow this > access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you > can disable SELinux protection altogether. Disabling SELinux protection is > not recommended. Please file a > http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package. > >Additional Information > >Source Context system_u:system_r:prelink_t:SystemLow-SystemHigh >Target Context system_u:object_r:initrc_tmp_t >Target Objects antivir [ file ] >Affected RPM Packages prelink-0.3.9-2 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { read } for comm="prelink" dev=dm-0 egid=0 euid=0 >exe="/usr/sbin/prelink" exit=6 fsgid=0 fsuid=0 gid=0 items=0 name="antivir" >pid=11871 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 sgid=0 >subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 suid=0 tclass=file >tcontext=system_u:object_r:initrc_tmp_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /lib/ld-2.5.so (prelink_t) "execute" to > /usr/lib/AntiVir/antivir (initrc_tmp_t). > >Detailed Description > SELinux denied access requested by /lib/ld-2.5.so. It is not expected that > this access is required by /lib/ld-2.5.so and this access may signal an > intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for /usr/lib/AntiVir/antivir, > restorecon -v /usr/lib/AntiVir/antivir If this does not work, there is > currently no automatic way to allow this access. Instead, you can generate > a local policy module to allow this access - see > http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable > SELinux protection altogether. Disabling SELinux protection is not > recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi > against this package. > >Additional Information > >Source Context system_u:system_r:prelink_t:SystemLow-SystemHigh >Target Context system_u:object_r:initrc_tmp_t >Target Objects /usr/lib/AntiVir/antivir [ file ] >Affected RPM Packages glibc-2.5-10.fc6 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { execute } for comm="ld-linux.so.2" dev=dm-0 egid=0 euid=0 >exe="/lib/ld-2.5.so" exit=134508544 fsgid=0 fsuid=0 gid=0 items=0 name="antivir" >path="/usr/lib/AntiVir/antivir" pid=15217 >scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 sgid=0 >subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 suid=0 tclass=file >tcontext=system_u:object_r:initrc_tmp_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /usr/sbin/prelink (prelink_t) "read" to ioq3ded > (usr_t). > >Detailed Description > SELinux denied access requested by /usr/sbin/prelink. It is not expected > that this access is required by /usr/sbin/prelink and this access may signal > an intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for ioq3ded, restorecon -v ioq3ded > If this does not work, there is currently no automatic way to allow this > access. Instead, you can generate a local policy module to allow this > access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you > can disable SELinux protection altogether. Disabling SELinux protection is > not recommended. Please file a > http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package. > >Additional Information > >Source Context system_u:system_r:prelink_t:SystemLow-SystemHigh >Target Context system_u:object_r:usr_t >Target Objects ioq3ded [ file ] >Affected RPM Packages prelink-0.3.9-2 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { read } for comm="prelink" dev=dm-0 egid=0 euid=0 >exe="/usr/sbin/prelink" exit=6 fsgid=0 fsuid=0 gid=0 items=0 name="ioq3ded" >pid=11871 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 sgid=0 >subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 suid=0 tclass=file >tcontext=system_u:object_r:usr_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /lib/ld-2.5.so (prelink_t) "execute" to > /usr/games/quake3/ioq3ded (usr_t). > >Detailed Description > SELinux denied access requested by /lib/ld-2.5.so. It is not expected that > this access is required by /lib/ld-2.5.so and this access may signal an > intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > Sometimes labeling problems can cause SELinux denials. You could try to > restore the default system file context for /usr/games/quake3/ioq3ded, > restorecon -v /usr/games/quake3/ioq3ded If this does not work, there is > currently no automatic way to allow this access. Instead, you can generate > a local policy module to allow this access - see > http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable > SELinux protection altogether. Disabling SELinux protection is not > recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi > against this package. > >Additional Information > >Source Context system_u:system_r:prelink_t:SystemLow-SystemHigh >Target Context system_u:object_r:usr_t >Target Objects /usr/games/quake3/ioq3ded [ file ] >Affected RPM Packages glibc-2.5-10.fc6 > [application]quake3-1.34-0.1.rc2.svn908.fc6 > [target] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall_file >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { execute } for comm="ld-linux.so.2" dev=dm-0 egid=0 euid=0 >exe="/lib/ld-2.5.so" exit=134508544 fsgid=0 fsuid=0 gid=0 items=0 name="ioq3ded" >path="/usr/games/quake3/ioq3ded" pid=14831 >scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 sgid=0 >subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 suid=0 tclass=file >tcontext=system_u:object_r:usr_t:s0 tty=(none) uid=0 > > >Summary > SELinux is preventing /usr/sbin/useradd (useradd_t) "ioctl" to pipe:[12325] > (xdm_t). > >Detailed Description > SELinux denied access requested by /usr/sbin/useradd. It is not expected > that this access is required by /usr/sbin/useradd and this access may signal > an intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > You can generate a local policy module to allow this access - see > http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable > SELinux protection altogether. Disabling SELinux protection is not > recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi > against this package. > >Additional Information > >Source Context system_u:system_r:useradd_t >Target Context system_u:system_r:xdm_t:SystemLow-SystemHigh >Target Objects pipe:[12325] [ fifo_file ] >Affected RPM Packages shadow-utils-4.0.17-10.fc6 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { ioctl } for comm="useradd" dev=pipefs egid=0 euid=0 >exe="/usr/sbin/useradd" exit=-22 fsgid=0 fsuid=0 gid=0 items=0 name="[12325]" >path="pipe:[12325]" pid=4092 scontext=system_u:system_r:useradd_t:s0 sgid=0 >subj=system_u:system_r:useradd_t:s0 suid=0 tclass=fifo_file >tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tty=(none) uid=0 > > >Summary > SELinux is preventing /usr/bin/python (semanage_t) "ioctl" to pipe:[11703] > (xdm_t). > >Detailed Description > SELinux denied access requested by /usr/bin/python. It is not expected that > this access is required by /usr/bin/python and this access may signal an > intrusion attempt. It is also possible that the specific version or > configuration of the application is causing it to require additional access. > >Allowing Access > You can generate a local policy module to allow this access - see > http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable > SELinux protection altogether. Disabling SELinux protection is not > recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi > against this package. > >Additional Information > >Source Context system_u:system_r:semanage_t >Target Context system_u:system_r:xdm_t:SystemLow-SystemHigh >Target Objects pipe:[11703] [ fifo_file ] >Affected RPM Packages python-2.4.4-1.fc6 [application] >Policy RPM selinux-policy-2.4.6-23.fc6 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Permissive >Plugin Name plugins.catchall >Host Name worms.home >Platform Linux worms.home 2.6.18-1.2869.fc6 #1 SMP Wed Dec > 20 14:51:19 EST 2006 i686 athlon >Alert Count 1 >Line Numbers > >Raw Audit Messages > >avc: denied { ioctl } for comm="genhomedircon" dev=pipefs egid=0 euid=0 >exe="/usr/bin/python" exit=-22 fsgid=0 fsuid=0 gid=0 items=0 name="[11703]" >path="pipe:[11703]" pid=8348 scontext=system_u:system_r:semanage_t:s0 sgid=0 >subj=system_u:system_r:semanage_t:s0 suid=0 tclass=fifo_file >tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tty=(none) uid=0 >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 221718
: 145628