Attachment 231741 Details for Bug 309741 – selinux log

selinux log

selinux-dnsmasq.log (text/plain), 2.16 KB, created by Andrew Bartlett on 2007-10-19 00:57:52 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Andrew Bartlett

Created: 2007-10-19 00:57:52 UTC

Size: 2.16 KB

patch

obsolete

>[abartlet@naomi segv]$ sealert -l a1c9d444-060a-4c76-ab5b-e330efa7b955
>Summary
>    SELinux is preventing dnsmasq (dnsmasq_t) "create" to <Unknown>
>    (virt_var_lib_t).
>
>Detailed Description
>    SELinux denied access requested by dnsmasq. It is not expected that this
>    access is required by dnsmasq and this access may signal an intrusion
>    attempt. It is also possible that the specific version or configuration of
>    the application is causing it to require additional access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for <Unknown>, restorecon -v
>    <Unknown> If this does not work, there is currently no automatic way to
>    allow this access. Instead,  you can generate a local policy module to allow
>    this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385
>    Or you can disable SELinux protection altogether. Disabling SELinux
>    protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:dnsmasq_t:s0
>Target Context                system_u:object_r:virt_var_lib_t:s0
>Target Objects                None [ file ]
>Affected RPM Packages         
>Policy RPM                    selinux-policy-3.0.8-24.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Permissive
>Plugin Name                   plugins.catchall_file
>Host Name                     naomi
>Platform                      Linux naomi 2.6.23.1-23.fc8 #1 SMP Wed Oct 17
>                              18:14:46 EDT 2007 x86_64 x86_64
>Alert Count                   1
>First Seen                    Fri Oct 19 10:50:59 2007
>Last Seen                     Fri Oct 19 10:50:59 2007
>Local ID                      a1c9d444-060a-4c76-ab5b-e330efa7b955
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { create } for comm=dnsmasq dev=dm-0 name=dhcp-default.leases
>pid=2571 scontext=system_u:system_r:dnsmasq_t:s0 tclass=file
>tcontext=system_u:object_r:virt_var_lib_t:s0
>
>

Actions: View

Attachments on bug 309741: 231741