Attachment 201511 Details for Bug 299481 – SELinux alert report of the issue.

SELinux alert report of the issue.

selinux_alert.txt (text/plain), 1.97 KB, created by Jack Magne on 2007-09-20 23:13:07 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jack Magne

Created: 2007-09-20 23:13:07 UTC

Size: 1.97 KB

patch

obsolete

>Summary
>    SELinux is preventing the gdm-binary from using potentially mislabeled files
>    (.pk11ipc1).
>
>Detailed Description
>    SELinux has denied gdm-binary access to potentially mislabeled file(s)
>    (.pk11ipc1).  This means that SELinux will not allow gdm-binary to use these
>    files.  It is common for users to edit files in their home directory or tmp
>    directories and then move (mv) them to system directories.  The problem is
>    that the files end up with the wrong file context which confined
>    applications are not allowed to access.
>
>Allowing Access
>    If you want gdm-binary to access this files, you need to relabel them using
>    restorecon -v .pk11ipc1.  You might want to relabel the entire directory
>    using restorecon -R -v .
>
>Additional Information        
>
>Source Context                system_u:system_r:xdm_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:unconfined_tmp_t:s0
>Target Objects                .pk11ipc1 [ dir ]
>Affected RPM Packages         
>Policy RPM                    selinux-policy-3.0.8-2.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.home_tmp_bad_labels
>Host Name                     dhcp-172-16-25-245.sfbay.redhat.com
>Platform                      Linux dhcp-172-16-25-245.sfbay.redhat.com
>                              2.6.23-0.187.rc6.git7.fc8 #1 SMP Tue Sep 18
>                              18:05:52 EDT 2007 i686 i686
>Alert Count                   96
>First Seen                    Wed 19 Sep 2007 05:54:23 PM PDT
>Last Seen                     Thu 20 Sep 2007 02:31:25 PM PDT
>Local ID                      371444c6-1fc9-49fb-85f0-1e4bcd21e69b
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { search } for comm=gdm-binary dev=dm-0 name=.pk11ipc1 pid=2275
>scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=dir
>tcontext=system_u:object_r:unconfined_tmp_t:s0
>

Actions: View

Attachments on bug 299481: 201511 | 202641 | 202801