Attachment 263221 Details for Bug 389931 – selinux avc denial

selinux avc denial

selinux_alert.txt (text/plain), 2.12 KB, created by John on 2007-11-19 03:41:01 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: John

Created: 2007-11-19 03:41:01 UTC

Size: 2.12 KB

patch

obsolete

>Summary
>    SELinux is preventing gdm (xdm_t) "getattr" to /bin/rpm (rpm_exec_t).
>
>Detailed Description
>    SELinux denied access requested by gdm. It is not expected that this access
>    is required by gdm and this access may signal an intrusion attempt. It is
>    also possible that the specific version or configuration of the application
>    is causing it to require additional access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for /bin/rpm, restorecon -v /bin/rpm
>    If this does not work, there is currently no automatic way to allow this
>    access. Instead,  you can generate a local policy module to allow this
>    access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you
>    can disable SELinux protection altogether. Disabling SELinux protection is
>    not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:xdm_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:rpm_exec_t:s0
>Target Objects                /bin/rpm [ file ]
>Affected RPM Packages         rpm-4.4.2.2-3.fc8 [target]
>Policy RPM                    selinux-policy-3.0.8-53.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     heatherb.hedntay.com
>Platform                      Linux heatherb.hedntay.com 2.6.23.1-49.fc8 #1 SMP
>                              Thu Nov 8 21:41:26 EST 2007 i686 i686
>Alert Count                   8
>First Seen                    Fri 16 Nov 2007 12:58:17 AM PST
>Last Seen                     Sun 18 Nov 2007 11:08:44 AM PST
>Local ID                      e56d5ecc-eec1-4b15-a8d0-3eb896220cc2
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { getattr } for comm=gdm dev=dm-0 path=/bin/rpm pid=2640
>scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=file
>tcontext=system_u:object_r:rpm_exec_t:s0
>

Actions: View

Attachments on bug 389931: 263221