Attachment 173001 Details for Bug 189142 – selinux alert report

selinux alert report

selinux_alert.txt (text/plain), 2.00 KB, created by Adam Goode on 2007-08-26 15:06:28 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Adam Goode

Created: 2007-08-26 15:06:28 UTC

Size: 2.00 KB

patch

obsolete

>Summary
>    SELinux is preventing /bin/mv from creating a file with a context of
>    fusefs_t on a filesystem.
>
>Detailed Description
>    SELinux is preventing /bin/mv from creating a file with a context of
>    fusefs_t on a filesystem. Usually this happens when you ask the cp commnad
>    to maintain the context of a file when copying between file systems.  "cp
>    -a" for example.  Not all file context should be maintained between the file
>    systems.  For example a readonly file type like iso9660_t should not be
>    placed on a r/w system.  cp -P might be a better solution, as this will
>    adopt the default file context for the destination.
>
>Allowing Access
>    Use a command like cp -P to preserve all permissions except SELinux context.
>
>Additional Information        
>
>Source Context                system_u:object_r:fusefs_t
>Target Context                system_u:object_r:fs_t
>Target Objects                foo [ filesystem ]
>Affected RPM Packages         coreutils-6.9-6.fc8 [application]
>Policy RPM                    selinux-policy-3.0.6-3.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.filesystem_associate
>Host Name                     datatype
>Platform                      Linux datatype 2.6.23-0.129.rc3.git4.fc8 #1 SMP
>                              Wed Aug 22 01:28:57 EDT 2007 x86_64 x86_64
>Alert Count                   2
>First Seen                    Sun 26 Aug 2007 10:59:25 AM EDT
>Last Seen                     Sun 26 Aug 2007 11:03:03 AM EDT
>Local ID                      426123af-7c96-46b7-9c26-299ba79938ff
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { associate } for comm="mv" egid=500 euid=500 exe="/bin/mv" exit=-13
>fsgid=500 fsuid=500 gid=500 items=0 name="foo" pid=23537
>scontext=system_u:object_r:fusefs_t:s0 sgid=500
>subj=system_u:system_r:unconfined_t:s0 suid=500 tclass=filesystem
>tcontext=system_u:object_r:fs_t:s0 tty=pts2 uid=500
>

Actions: View

Attachments on bug 189142: 173001