Attachment 1983458 Details for Bug 2232247 – File: description

File: description

description (text/plain), 1.93 KB, created by Geovanni B. R. on 2023-08-15 22:49:24 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Geovanni B. R.

Created: 2023-08-15 22:49:24 UTC

Size: 1.93 KB

patch

obsolete

>SELinux is preventing sss_cache from 'read' accesses on the fifo_file fifo_file.
>
>*****  Plugin catchall (100. confidence) suggests   **************************
>
>Si cree que de manera predeterminada se deberÃa permitir a sss_cache el acceso read sobre  fifo_file fifo_file.     
>Then deberÃa reportar esto como un error.
>Puede generar un mÃ³dulo de polÃtica local para permitir este acceso.
>Do
>permita el acceso temporalmente ejecutando:
># ausearch -c 'sss_cache' --raw | audit2allow -M mi-ssscache
># semodule -X 300 -i mi-ssscache.pp
>
>Additional Information:
>Source Context                system_u:system_r:sssd_t:s0
>Target Context                system_u:system_r:accountsd_t:s0
>Target Objects                fifo_file [ fifo_file ]
>Source                        sss_cache
>Source Path                   sss_cache
>Port                          <Desconocido>
>Host                          (removed)
>Source RPM Packages           
>Target RPM Packages           
>SELinux Policy RPM            selinux-policy-targeted-38.8-2.fc38.noarch
>Local Policy RPM              selinux-policy-targeted-38.8-2.fc38.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 6.2.9-300.fc38.x86_64 #1 SMP
>                              PREEMPT_DYNAMIC Thu Mar 30 22:32:58 UTC 2023
>                              x86_64
>Alert Count                   2
>First Seen                    2023-08-15 18:29:09 CDT
>Last Seen                     2023-08-15 18:29:09 CDT
>Local ID                      cd028d9c-7983-471e-9b41-10ebf2f5502b
>
>Raw Audit Messages
>type=AVC msg=audit(1692138549.863:686): avc:  denied  { read } for  pid=3210 comm="sss_cache" path="pipe:[36002]" dev="pipefs" ino=36002 scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:accountsd_t:s0 tclass=fifo_file permissive=0
>
>
>Hash: sss_cache,sssd_t,accountsd_t,fifo_file,read

Actions: View

Attachments on bug 2232247: 1983458 | 1983459