Attachment 214671 Details for Bug 316821 – calc|gedit|calc print selinux preventing access errors

calc|gedit|calc print selinux preventing access errors

smbspool.selinux_alert.txt (text/plain), 6.58 KB, created by David Timms on 2007-10-03 13:40:53 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: David Timms

Created: 2007-10-03 13:40:53 UTC

Size: 6.58 KB

patch

obsolete

>Summary
>    SELinux is preventing the /usr/bin/smbspool from using potentially
>    mislabeled files (/tmp/jpsock.150_09.4180).
>
>Detailed Description
>    SELinux has denied /usr/bin/smbspool access to potentially mislabeled
>    file(s) (/tmp/jpsock.150_09.4180).  This means that SELinux will not allow
>    /usr/bin/smbspool to use these files.  It is common for users to edit files
>    in their home directory or tmp directories and then move (mv) them to system
>    directories.  The problem is that the files end up with the wrong file
>    context which confined applications are not allowed to access.
>
>Allowing Access
>    If you want /usr/bin/smbspool to access this files, you need to relabel them
>    using restorecon -v /tmp/jpsock.150_09.4180.  You might want to relabel the
>    entire directory using restorecon -R -v /tmp.
>
>Additional Information        
>
>Source Context                system_u:system_r:cupsd_t:SystemLow-SystemHigh
>Target Context                user_u:object_r:tmp_t
>Target Objects                /tmp/jpsock.150_09.4180 [ sock_file ]
>Affected RPM Packages         samba-client-3.0.26a-0.fc7 [application]
>Policy RPM                    selinux-policy-2.6.4-43.fc7
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.home_tmp_bad_labels
>Host Name                     davidtnotebook
>Platform                      Linux davidtnotebook 2.6.22.9-91.fc7 #1 SMP Thu
>                              Sep 27 23:10:59 EDT 2007 i686 i686
>Alert Count                   1
>First Seen                    Tue 02 Oct 2007 11:42:47 EST
>Last Seen                     Tue 02 Oct 2007 11:42:47 EST
>Local ID                      8538640e-2d29-4981-ab04-fdc4d7a578b2
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { getattr } for comm="smb" dev=sda5 egid=7 euid=4
>exe="/usr/bin/smbspool" exit=-13 fsgid=7 fsuid=4 gid=7 items=0
>name="jpsock.150_09.4180" path="/tmp/jpsock.150_09.4180" pid=6823
>scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 sgid=7
>subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 suid=4 tclass=sock_file
>tcontext=user_u:object_r:tmp_t:s0 tty=(none) uid=4
>
>
>Summary
>    SELinux is preventing the /usr/bin/smbspool from using potentially
>    mislabeled files (/tmp/gedit.root.3921025626).
>
>Detailed Description
>    SELinux has denied /usr/bin/smbspool access to potentially mislabeled
>    file(s) (/tmp/gedit.root.3921025626).  This means that SELinux will not
>    allow /usr/bin/smbspool to use these files.  It is common for users to edit
>    files in their home directory or tmp directories and then move (mv) them to
>    system directories.  The problem is that the files end up with the wrong
>    file context which confined applications are not allowed to access.
>
>Allowing Access
>    If you want /usr/bin/smbspool to access this files, you need to relabel them
>    using restorecon -v /tmp/gedit.root.3921025626.  You might want to relabel
>    the entire directory using restorecon -R -v /tmp.
>
>Additional Information        
>
>Source Context                system_u:system_r:cupsd_t:SystemLow-SystemHigh
>Target Context                user_u:object_r:tmp_t
>Target Objects                /tmp/gedit.root.3921025626 [ sock_file ]
>Affected RPM Packages         samba-client-3.0.26a-0.fc7 [application]
>Policy RPM                    selinux-policy-2.6.4-43.fc7
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.home_tmp_bad_labels
>Host Name                     davidtnotebook
>Platform                      Linux davidtnotebook 2.6.22.9-91.fc7 #1 SMP Thu
>                              Sep 27 23:10:59 EDT 2007 i686 i686
>Alert Count                   1
>First Seen                    Wed 03 Oct 2007 11:12:49 EST
>Last Seen                     Wed 03 Oct 2007 11:12:49 EST
>Local ID                      36632420-a756-4bd9-a5ad-83c9cbdcb3f0
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { getattr } for comm="smb" dev=sda5 egid=7 euid=4
>exe="/usr/bin/smbspool" exit=-13 fsgid=7 fsuid=4 gid=7 items=0
>name="gedit.root.3921025626" path="/tmp/gedit.root.3921025626" pid=4794
>scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 sgid=7
>subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 suid=4 tclass=sock_file
>tcontext=user_u:object_r:tmp_t:s0 tty=(none) uid=4
>
>
>Summary
>    SELinux is preventing the /usr/bin/smbspool from using potentially
>    mislabeled files (/tmp/jpsock.150_09.4224).
>
>Detailed Description
>    SELinux has denied /usr/bin/smbspool access to potentially mislabeled
>    file(s) (/tmp/jpsock.150_09.4224).  This means that SELinux will not allow
>    /usr/bin/smbspool to use these files.  It is common for users to edit files
>    in their home directory or tmp directories and then move (mv) them to system
>    directories.  The problem is that the files end up with the wrong file
>    context which confined applications are not allowed to access.
>
>Allowing Access
>    If you want /usr/bin/smbspool to access this files, you need to relabel them
>    using restorecon -v /tmp/jpsock.150_09.4224.  You might want to relabel the
>    entire directory using restorecon -R -v /tmp.
>
>Additional Information        
>
>Source Context                system_u:system_r:cupsd_t:SystemLow-SystemHigh
>Target Context                user_u:object_r:tmp_t
>Target Objects                /tmp/jpsock.150_09.4224 [ sock_file ]
>Affected RPM Packages         samba-client-3.0.26a-0.fc7 [application]
>Policy RPM                    selinux-policy-2.6.4-43.fc7
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.home_tmp_bad_labels
>Host Name                     davidtnotebook
>Platform                      Linux davidtnotebook 2.6.22.9-91.fc7 #1 SMP Thu
>                              Sep 27 23:10:59 EDT 2007 i686 i686
>Alert Count                   1
>First Seen                    Wed 03 Oct 2007 11:12:49 EST
>Last Seen                     Wed 03 Oct 2007 11:12:49 EST
>Local ID                      699ce643-c1f0-4a8e-8f07-9834e3198ecc
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { getattr } for comm="smb" dev=sda5 egid=7 euid=4
>exe="/usr/bin/smbspool" exit=-13 fsgid=7 fsuid=4 gid=7 items=0
>name="jpsock.150_09.4224" path="/tmp/jpsock.150_09.4224" pid=4794
>scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 sgid=7
>subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 suid=4 tclass=sock_file
>tcontext=user_u:object_r:tmp_t:s0 tty=(none) uid=4
>

Actions: View

Attachments on bug 316821: 214671