Attachment 148321 Details for Bug 229197 – setroubleshoot information

setroubleshoot information

setroubleshoot-starfighter.txt (text/plain), 2.11 KB, created by Russell Harrison on 2007-02-19 14:47:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Russell Harrison

Created: 2007-02-19 14:47:30 UTC

Size: 2.11 KB

patch

obsolete

>Summary
>    SELinux is preventing /usr/sbin/prelink (prelink_t) "read" to starfighter
>    (usr_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/sbin/prelink. It is not expected
>    that this access is required by /usr/sbin/prelink and this access may signal
>    an intrusion attempt. It is also possible that the specific version or
>    configuration of the application is causing it to require additional access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for starfighter, restorecon -v
>    starfighter If this does not work, there is currently no automatic way to
>    allow this access. Instead,  you can generate a local policy module to allow
>    this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385
>    Or you can disable SELinux protection altogether. Disabling SELinux
>    protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information:       
>
>Source Context:               system_u:system_r:prelink_t:SystemLow-SystemHigh
>Target Context:               system_u:object_r:usr_t
>Target Objects:               starfighter [ file ]
>Affected RPM Packages:        prelink-0.3.9-2 [application]
>Policy RPM:                   selinux-policy-2.4.6-37.fc6
>Selinux Enabled:              True
>Policy Type:                  targeted
>MLS Enabled:                  True
>Enforcing Mode:               Enforcing
>Plugin Name:                  plugins.catchall_file
>Host Name:                    rusharri-lnx2
>Platform:                     Linux rusharri-lnx2 2.6.19-1.2911.fc6 #1 SMP Sat Feb 10 15:51:47 EST 2007 i686 i686
>Alert Count:                  3
>Line Numbers:                 
>
>Raw Audit Messages:           
>
>avc: denied { read } for comm="prelink" dev=dm-0 egid=0 euid=0 exe="/usr/sbin/prelink" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="starfighter" pid=12008 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023 sgid=0 subj=system_u:system_r:prelink_t:s0-s0:c0.c1023 suid=0 tclass=file tcontext=system_u:object_r:usr_t:s0 tty=(none) uid=0

Actions: View

Attachments on bug 229197: 148321