Attachment 158977 Details for Bug 247847 – setroubleshoot page for this error

setroubleshoot page for this error

selinux_alert.txt (text/plain), 2.24 KB, created by stanl on 2007-07-11 17:30:52 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: stanl

Created: 2007-07-11 17:30:52 UTC

Size: 2.24 KB

patch

obsolete

>Summary
>    SELinux is preventing the /usr/sbin/sendmail.sendmail from using potentially
>    mislabeled files (/tmp/file6bChg8 (deleted)).
>
>Detailed Description
>    SELinux has denied /usr/sbin/sendmail.sendmail access to potentially
>    mislabeled file(s) (/tmp/file6bChg8 (deleted)).  This means that SELinux
>    will not allow /usr/sbin/sendmail.sendmail to use these files.  It is common
>    for users to edit files in their home directory or tmp directories and then
>    move (mv) them to system directories.  The problem is that the files end up
>    with the wrong file context which confined applications are not allowed to
>    access.
>
>Allowing Access
>    If you want /usr/sbin/sendmail.sendmail to access this files, you need to
>    relabel them using restorecon -v /tmp/file6bChg8 (deleted).  You might want
>    to relabel the entire directory using restorecon -R -v /tmp.
>
>Additional Information        
>
>Source Context                system_u:system_r:system_mail_t
>Target Context                system_u:object_r:crond_tmp_t
>Target Objects                /tmp/file6bChg8 (deleted) [ file ]
>Affected RPM Packages         sendmail-8.14.1-2 [application]
>Policy RPM                    selinux-policy-2.6.4-25.fc7
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Permissive
>Plugin Name                   plugins.home_tmp_bad_labels
>Host Name                     wearisome
>Platform                      Linux wearisome 2.6.21-1.3228.fc7 #1 SMP Tue Jun
>                              12 15:37:31 EDT 2007 i686 athlon
>Alert Count                   1
>First Seen                    Wed 11 Jul 2007 08:37:13 AM MST
>Last Seen                     Wed 11 Jul 2007 08:37:13 AM MST
>Local ID                      233ec581-dfb7-48cb-9246-ead75c619809
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { read } for comm="sendmail" dev=sda2 egid=51 euid=0
>exe="/usr/sbin/sendmail.sendmail" exit=0 fsgid=51 fsuid=0 gid=0 items=0
>name="file6bChg8" path=2F746D702F66696C65366243686738202864656C6574656429
>pid=5471 scontext=system_u:system_r:system_mail_t:s0 sgid=51
>subj=system_u:system_r:system_mail_t:s0 suid=0 tclass=file
>tcontext=system_u:object_r:crond_tmp_t:s0 tty=(none) uid=0
>

Actions: View

Attachments on bug 247847: 158977