Attachment 161947 Details for Bug 253672 – setroubleshooter output

setroubleshooter output

selinux_alert.txt (text/plain), 11.78 KB, created by Pete Graner on 2007-08-21 05:17:01 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Pete Graner

Created: 2007-08-21 05:17:01 UTC

Size: 11.78 KB

patch

obsolete

>Summary
>    SELinux is preventing /usr/bin/smbclient (automount_t) "getattr" to
>    /etc/samba/smb.conf (samba_etc_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/bin/smbclient. It is not expected
>    that this access is required by /usr/bin/smbclient and this access may
>    signal an intrusion attempt. It is also possible that the specific version
>    or configuration of the application is causing it to require additional
>    access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for /etc/samba/smb.conf, restorecon
>    -v /etc/samba/smb.conf If this does not work, there is currently no
>    automatic way to allow this access. Instead,  you can generate a local
>    policy module to allow this access - see http://fedora.redhat.com/docs
>    /selinux-faq-fc5/#id2961385 Or you can disable SELinux protection
>    altogether. Disabling SELinux protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                user_u:system_r:automount_t
>Target Context                system_u:object_r:samba_etc_t
>Target Objects                /etc/samba/smb.conf [ file ]
>Affected RPM Packages         samba-client-3.0.25b-2.fc7 [application]samba-
>                              common-3.0.25b-2.fc7 [target]
>Policy RPM                    selinux-policy-2.6.4-33.fc7
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     zorak.redvoodoo.org
>Platform                      Linux zorak.redvoodoo.org 2.6.22.1-41.fc7 #1 SMP
>                              Fri Jul 27 18:10:34 EDT 2007 i686 i686
>Alert Count                   1
>First Seen                    Tue 21 Aug 2007 01:07:29 AM EDT
>Last Seen                     Tue 21 Aug 2007 01:07:29 AM EDT
>Local ID                      c09aac3b-41d7-446a-a485-f3bc6a7d937e
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { getattr } for comm="smbclient" dev=dm-0 egid=0 euid=0
>exe="/usr/bin/smbclient" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="smb.conf"
>path="/etc/samba/smb.conf" pid=6000 scontext=user_u:system_r:automount_t:s0
>sgid=0 subj=user_u:system_r:automount_t:s0 suid=0 tclass=file
>tcontext=system_u:object_r:samba_etc_t:s0 tty=(none) uid=0
>
>
>Summary
>    SELinux is preventing /usr/bin/smbclient (automount_t) "read" to smb.conf
>    (samba_etc_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/bin/smbclient. It is not expected
>    that this access is required by /usr/bin/smbclient and this access may
>    signal an intrusion attempt. It is also possible that the specific version
>    or configuration of the application is causing it to require additional
>    access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for smb.conf, restorecon -v smb.conf
>    If this does not work, there is currently no automatic way to allow this
>    access. Instead,  you can generate a local policy module to allow this
>    access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you
>    can disable SELinux protection altogether. Disabling SELinux protection is
>    not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                user_u:system_r:automount_t
>Target Context                system_u:object_r:samba_etc_t
>Target Objects                smb.conf [ file ]
>Affected RPM Packages         samba-client-3.0.25b-2.fc7 [application]
>Policy RPM                    selinux-policy-2.6.4-33.fc7
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     zorak.redvoodoo.org
>Platform                      Linux zorak.redvoodoo.org 2.6.22.1-41.fc7 #1 SMP
>                              Fri Jul 27 18:10:34 EDT 2007 i686 i686
>Alert Count                   1
>First Seen                    Tue 21 Aug 2007 01:07:29 AM EDT
>Last Seen                     Tue 21 Aug 2007 01:07:29 AM EDT
>Local ID                      fb33cd83-2ee3-4466-b2d4-6db74898794b
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { read } for comm="smbclient" dev=dm-0 egid=0 euid=0
>exe="/usr/bin/smbclient" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="smb.conf"
>pid=6000 scontext=user_u:system_r:automount_t:s0 sgid=0
>subj=user_u:system_r:automount_t:s0 suid=0 tclass=file
>tcontext=system_u:object_r:samba_etc_t:s0 tty=(none) uid=0
>
>
>Summary
>    SELinux is preventing /usr/bin/smbclient (automount_t) "read write" to
>    gencache.tdb (samba_var_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/bin/smbclient. It is not expected
>    that this access is required by /usr/bin/smbclient and this access may
>    signal an intrusion attempt. It is also possible that the specific version
>    or configuration of the application is causing it to require additional
>    access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for gencache.tdb, restorecon -v
>    gencache.tdb If this does not work, there is currently no automatic way to
>    allow this access. Instead,  you can generate a local policy module to allow
>    this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385
>    Or you can disable SELinux protection altogether. Disabling SELinux
>    protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                user_u:system_r:automount_t
>Target Context                user_u:object_r:samba_var_t
>Target Objects                gencache.tdb [ file ]
>Affected RPM Packages         samba-client-3.0.25b-2.fc7 [application]
>Policy RPM                    selinux-policy-2.6.4-33.fc7
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     zorak.redvoodoo.org
>Platform                      Linux zorak.redvoodoo.org 2.6.22.1-41.fc7 #1 SMP
>                              Fri Jul 27 18:10:34 EDT 2007 i686 i686
>Alert Count                   6
>First Seen                    Tue 21 Aug 2007 01:07:29 AM EDT
>Last Seen                     Tue 21 Aug 2007 01:07:29 AM EDT
>Local ID                      32b70936-4ff8-4079-a664-1215e1eef0a6
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { read, write } for comm="smbclient" dev=dm-0 egid=0 euid=0
>exe="/usr/bin/smbclient" exit=-13 fsgid=0 fsuid=0 gid=0 items=0
>name="gencache.tdb" pid=6000 scontext=user_u:system_r:automount_t:s0 sgid=0
>subj=user_u:system_r:automount_t:s0 suid=0 tclass=file
>tcontext=user_u:object_r:samba_var_t:s0 tty=(none) uid=0
>
>
>Summary
>    SELinux is preventing /usr/bin/smbclient (automount_t) "read" to
>    gencache.tdb (samba_var_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/bin/smbclient. It is not expected
>    that this access is required by /usr/bin/smbclient and this access may
>    signal an intrusion attempt. It is also possible that the specific version
>    or configuration of the application is causing it to require additional
>    access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for gencache.tdb, restorecon -v
>    gencache.tdb If this does not work, there is currently no automatic way to
>    allow this access. Instead,  you can generate a local policy module to allow
>    this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385
>    Or you can disable SELinux protection altogether. Disabling SELinux
>    protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                user_u:system_r:automount_t
>Target Context                user_u:object_r:samba_var_t
>Target Objects                gencache.tdb [ file ]
>Affected RPM Packages         samba-client-3.0.25b-2.fc7 [application]
>Policy RPM                    selinux-policy-2.6.4-33.fc7
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     zorak.redvoodoo.org
>Platform                      Linux zorak.redvoodoo.org 2.6.22.1-41.fc7 #1 SMP
>                              Fri Jul 27 18:10:34 EDT 2007 i686 i686
>Alert Count                   6
>First Seen                    Tue 21 Aug 2007 01:07:29 AM EDT
>Last Seen                     Tue 21 Aug 2007 01:07:29 AM EDT
>Local ID                      c0a09ac3-6e0a-4519-9b33-8262f9af146d
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { read } for comm="smbclient" dev=dm-0 egid=0 euid=0
>exe="/usr/bin/smbclient" exit=-13 fsgid=0 fsuid=0 gid=0 items=0
>name="gencache.tdb" pid=6000 scontext=user_u:system_r:automount_t:s0 sgid=0
>subj=user_u:system_r:automount_t:s0 suid=0 tclass=file
>tcontext=user_u:object_r:samba_var_t:s0 tty=(none) uid=0
>
>
>Summary
>    SELinux is preventing /usr/bin/smbclient (automount_t) "read" to lmhosts
>    (samba_etc_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/bin/smbclient. It is not expected
>    that this access is required by /usr/bin/smbclient and this access may
>    signal an intrusion attempt. It is also possible that the specific version
>    or configuration of the application is causing it to require additional
>    access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for lmhosts, restorecon -v lmhosts
>    If this does not work, there is currently no automatic way to allow this
>    access. Instead,  you can generate a local policy module to allow this
>    access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you
>    can disable SELinux protection altogether. Disabling SELinux protection is
>    not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                user_u:system_r:automount_t
>Target Context                system_u:object_r:samba_etc_t
>Target Objects                lmhosts [ file ]
>Affected RPM Packages         samba-client-3.0.25b-2.fc7 [application]
>Policy RPM                    selinux-policy-2.6.4-33.fc7
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     zorak.redvoodoo.org
>Platform                      Linux zorak.redvoodoo.org 2.6.22.1-41.fc7 #1 SMP
>                              Fri Jul 27 18:10:34 EDT 2007 i686 i686
>Alert Count                   2
>First Seen                    Tue 21 Aug 2007 01:07:29 AM EDT
>Last Seen                     Tue 21 Aug 2007 01:07:29 AM EDT
>Local ID                      27a56407-04c0-4f3a-a1c0-1cbaa5566508
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { read } for comm="smbclient" dev=dm-0 egid=0 euid=0
>exe="/usr/bin/smbclient" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="lmhosts"
>pid=6000 scontext=user_u:system_r:automount_t:s0 sgid=0
>subj=user_u:system_r:automount_t:s0 suid=0 tclass=file
>tcontext=system_u:object_r:samba_etc_t:s0 tty=(none) uid=0
>

Actions: View

Attachments on bug 253672: 161947