Attachment 152636 Details for Bug 236484 – SELinux description of the restriction

SELinux description of the restriction

SELinux-1 (text/plain), 1.94 KB, created by Rob Schlemon on 2007-04-15 00:40:44 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Rob Schlemon

Created: 2007-04-15 00:40:44 UTC

Size: 1.94 KB

patch

obsolete

>Summary
>SELinux is preventing /usr/sbin/grpconv (sysadm_passwd_t) "execute" to nscd (nscd_exec_t).
>
>Detailed Description
>SELinux denied access requested by /usr/sbin/grpconv. It is not expected that this access is required by /usr/sbin/grpconv and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access.
>
>Allowing Access
>Sometimes labeling problems can cause SELinux denials. You could try to restore the default system file context for nscd, restorecon -v nscd If this does not work, there is currently no automatic way to allow this access. Instead, you can generate a local policy module to allow this access - see FAQ Or you can disable SELinux protection altogether. Disabling SELinux protection is not recommended. Please file a bug report against this package.
>
>Additional Information
>Source Context:Â Â 	system_u:system_r:sysadm_passwd_t
>Target Context:Â Â 	system_u:object_r:nscd_exec_t
>Target Objects:Â Â 	nscd [ file ]
>Affected RPM Packages:Â Â shadow-utils-4.0.18.1-11.fc7 [application]
>Policy RPM:Â Â 		selinux-policy-2.5.10-2.fc7
>Selinux Enabled:Â Â 	True
>Policy Type:Â Â 		targeted
>MLS Enabled:Â Â 		True
>Enforcing Mode:Â Â 	Enforcing
>Plugin Name:Â Â 		plugins.catchall_file
>Host Name:Â Â 		localhost.localdomain
>Platform:Â Â 		Linux localhost.localdomain 2.6.20-1.3023.fc7 #1 SMP Sun Mar 25 22:12:02 EDT 2007 i686 i686
>Alert Count:Â Â 		4
>First Seen:Â Â 		Sat 14 Apr 2007 07:12:07 PM EDT
>Last Seen:Â Â 		Sat 14 Apr 2007 07:12:07 PM EDT
>Local ID:Â Â 		83beef7e-c8b0-4025-b66a-be3b0200b3a5
>Line Numbers:Â Â 
>
>Raw Audit Messages :
>
>avc: denied { execute } for comm="grpconv" dev=dm-0 egid=0 euid=0 exe="/usr/sbin/grpconv" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="nscd" pid=3232 scontext=system_u:system_r:sysadm_passwd_t:s0 sgid=0 subj=system_u:system_r:sysadm_passwd_t:s0 suid=0 tclass=file tcontext=system_u:object_r:nscd_exec_t:s0 tty=(none) uid=0

Actions: View

Attachments on bug 236484: 152636