Attachment 263591 Details for Bug 343851 – saved log of selinux_alert.txt from pungi compose

saved log of selinux_alert.txt from pungi compose

selinux_alert.txt (text/plain), 22.22 KB, created by John Reiser on 2007-11-19 16:00:02 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: John Reiser

Created: 2007-11-19 16:00:02 UTC

Size: 22.22 KB

patch

obsolete

>Summary
>    SELinux is preventing /usr/sbin/semodule (semanage_t) "read write" to socket
>    (unconfined_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/sbin/semodule. It is not expected
>    that this access is required by /usr/sbin/semodule and this access may
>    signal an intrusion attempt. It is also possible that the specific version
>    or configuration of the application is causing it to require additional
>    access.
>
>Allowing Access
>    You can generate a local policy module to allow this access - see
>    http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable
>    SELinux protection altogether. Disabling SELinux protection is not
>    recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi
>    against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:semanage_t:s0
>Target Context                system_u:system_r:unconfined_t:s0
>Target Objects                socket [ tcp_socket ]
>Affected RPM Packages         policycoreutils-2.0.31-7.fc8 [application]
>Policy RPM                    selinux-policy-3.0.8-53.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall
>Host Name                     f8-32.localdomain
>Platform                      Linux f8-32.localdomain 2.6.23.1-49.fc8 #1 SMP Thu
>                              Nov 8 21:41:26 EST 2007 i686 athlon
>Alert Count                   3
>First Seen                    Thu 15 Nov 2007 09:10:21 PM PST
>Last Seen                     Fri 16 Nov 2007 02:41:09 PM PST
>Local ID                      aa004a08-6236-437f-850e-553ae6076495
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { read write } for comm=semodule dev=sockfs egid=0 euid=0
>exe=/usr/sbin/semodule exit=0 fsgid=0 fsuid=0 gid=0 items=0 path=socket:[17836]
>pid=32618 scontext=system_u:system_r:semanage_t:s0 sgid=0
>subj=system_u:system_r:semanage_t:s0 suid=0 tclass=tcp_socket
>tcontext=system_u:system_r:unconfined_t:s0 tty=pts0 uid=0
>
>
>Summary
>    SELinux is preventing the /usr/sbin/semodule from using potentially
>    mislabeled files (<Unknown>).
>
>Detailed Description
>    SELinux has denied /usr/sbin/semodule access to potentially mislabeled
>    file(s) (<Unknown>).  This means that SELinux will not allow
>    /usr/sbin/semodule to use these files.  It is common for users to edit files
>    in their home directory or tmp directories and then move (mv) them to system
>    directories.  The problem is that the files end up with the wrong file
>    context which confined applications are not allowed to access.
>
>Allowing Access
>    If you want /usr/sbin/semodule to access this files, you need to relabel
>    them using restorecon -v <Unknown>.  You might want to relabel the entire
>    directory using restorecon -R -v <Unknown>.
>
>Additional Information        
>
>Source Context                system_u:system_r:semanage_t:s0
>Target Context                system_u:object_r:unconfined_tmp_t:s0
>Target Objects                None [ dir ]
>Affected RPM Packages         policycoreutils-2.0.31-7.fc8 [application]
>Policy RPM                    selinux-policy-3.0.8-53.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.home_tmp_bad_labels
>Host Name                     f8-32.localdomain
>Platform                      Linux f8-32.localdomain 2.6.23.1-49.fc8 #1 SMP Thu
>                              Nov 8 21:41:26 EST 2007 i686 athlon
>Alert Count                   3
>First Seen                    Thu 15 Nov 2007 09:10:21 PM PST
>Last Seen                     Fri 16 Nov 2007 02:41:09 PM PST
>Local ID                      af6a3d7f-28be-4d09-aaf3-da99d7c0df82
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { write } for comm=semodule dev=sda14 egid=0 euid=0
>exe=/usr/sbin/semodule exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name=modules
>pid=32618 scontext=system_u:system_r:semanage_t:s0 sgid=0
>subj=system_u:system_r:semanage_t:s0 suid=0 tclass=dir
>tcontext=system_u:object_r:unconfined_tmp_t:s0 tty=pts0 uid=0
>
>
>Summary
>    SELinux is preventing semanage (semanage_t) "write" to /dev/null (device_t).
>
>Detailed Description
>    SELinux denied access requested by semanage. It is not expected that this
>    access is required by semanage and this access may signal an intrusion
>    attempt. It is also possible that the specific version or configuration of
>    the application is causing it to require additional access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for /dev/null, restorecon -v
>    /dev/null If this does not work, there is currently no automatic way to
>    allow this access. Instead,  you can generate a local policy module to allow
>    this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385
>    Or you can disable SELinux protection altogether. Disabling SELinux
>    protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:semanage_t:s0
>Target Context                system_u:object_r:device_t:s0
>Target Objects                /dev/null [ file ]
>Affected RPM Packages         
>Policy RPM                    selinux-policy-3.0.8-53.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     f8-32.localdomain
>Platform                      Linux f8-32.localdomain 2.6.23.1-49.fc8 #1 SMP Thu
>                              Nov 8 21:41:26 EST 2007 i686 athlon
>Alert Count                   9
>First Seen                    Thu 15 Nov 2007 09:05:25 PM PST
>Last Seen                     Fri 16 Nov 2007 02:36:59 PM PST
>Local ID                      23ac7221-c2a6-4c5a-aad0-1ae1ffbbf987
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { write } for comm=semanage dev=sda14 egid=0 euid=0
>exe=/usr/bin/python exit=0 fsgid=0 fsuid=0 gid=0 items=0 path=/dev/null pid=6199
>scontext=system_u:system_r:semanage_t:s0 sgid=0
>subj=system_u:system_r:semanage_t:s0 suid=0 tclass=file
>tcontext=system_u:object_r:device_t:s0 tty=pts0 uid=0
>
>
>Summary
>    SELinux is preventing /sbin/setfiles (setfiles_t) "write" to /dev/null
>    (device_t).
>
>Detailed Description
>    SELinux denied access requested by /sbin/setfiles. It is not expected that
>    this access is required by /sbin/setfiles and this access may signal an
>    intrusion attempt. It is also possible that the specific version or
>    configuration of the application is causing it to require additional access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for /dev/null, restorecon -v
>    /dev/null If this does not work, there is currently no automatic way to
>    allow this access. Instead,  you can generate a local policy module to allow
>    this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385
>    Or you can disable SELinux protection altogether. Disabling SELinux
>    protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:setfiles_t:s0
>Target Context                system_u:object_r:device_t:s0
>Target Objects                /dev/null [ file ]
>Affected RPM Packages         policycoreutils-2.0.31-7.fc8 [application]
>Policy RPM                    selinux-policy-3.0.8-53.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     f8-32.localdomain
>Platform                      Linux f8-32.localdomain 2.6.23.1-49.fc8 #1 SMP Thu
>                              Nov 8 21:41:26 EST 2007 i686 athlon
>Alert Count                   6
>First Seen                    Thu 15 Nov 2007 09:05:19 PM PST
>Last Seen                     Fri 16 Nov 2007 02:36:59 PM PST
>Local ID                      81f5e857-f795-4d75-b9be-2a12613ad0ab
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { write } for comm=restorecon dev=sda14 egid=0 euid=0
>exe=/sbin/setfiles exit=0 fsgid=0 fsuid=0 gid=0 items=0 path=/dev/null pid=6202
>scontext=system_u:system_r:setfiles_t:s0 sgid=0
>subj=system_u:system_r:setfiles_t:s0 suid=0 tclass=file
>tcontext=system_u:object_r:device_t:s0 tty=pts0 uid=0
>
>
>Summary
>    SELinux is preventing /usr/sbin/useradd (useradd_t) "read write" to
>    <Unknown> (var_log_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/sbin/useradd. It is not expected
>    that this access is required by /usr/sbin/useradd and this access may signal
>    an intrusion attempt. It is also possible that the specific version or
>    configuration of the application is causing it to require additional access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for <Unknown>, restorecon -v
>    <Unknown> If this does not work, there is currently no automatic way to
>    allow this access. Instead,  you can generate a local policy module to allow
>    this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385
>    Or you can disable SELinux protection altogether. Disabling SELinux
>    protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:useradd_t:s0
>Target Context                system_u:object_r:var_log_t:s0
>Target Objects                None [ file ]
>Affected RPM Packages         shadow-utils-4.0.18.1-18.fc8 [application]
>Policy RPM                    selinux-policy-3.0.8-53.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     f8-32.localdomain
>Platform                      Linux f8-32.localdomain 2.6.23.1-49.fc8 #1 SMP Thu
>                              Nov 8 21:41:26 EST 2007 i686 athlon
>Alert Count                   27
>First Seen                    Thu 15 Nov 2007 09:03:57 PM PST
>Last Seen                     Fri 16 Nov 2007 02:36:59 PM PST
>Local ID                      e33c0015-1c8c-483b-8398-a33abede8174
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { read write } for comm=useradd dev=sda14 egid=0 euid=0
>exe=/usr/sbin/useradd exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name=lastlog
>pid=6204 scontext=system_u:system_r:useradd_t:s0 sgid=0
>subj=system_u:system_r:useradd_t:s0 suid=0 tclass=file
>tcontext=system_u:object_r:var_log_t:s0 tty=pts0 uid=0
>
>
>Summary
>    SELinux is preventing /usr/sbin/useradd (useradd_t) "write" to /dev/null
>    (device_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/sbin/useradd. It is not expected
>    that this access is required by /usr/sbin/useradd and this access may signal
>    an intrusion attempt. It is also possible that the specific version or
>    configuration of the application is causing it to require additional access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for /dev/null, restorecon -v
>    /dev/null If this does not work, there is currently no automatic way to
>    allow this access. Instead,  you can generate a local policy module to allow
>    this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385
>    Or you can disable SELinux protection altogether. Disabling SELinux
>    protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:useradd_t:s0
>Target Context                system_u:object_r:device_t:s0
>Target Objects                /dev/null [ file ]
>Affected RPM Packages         shadow-utils-4.0.18.1-18.fc8 [application]
>Policy RPM                    selinux-policy-3.0.8-53.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     f8-32.localdomain
>Platform                      Linux f8-32.localdomain 2.6.23.1-49.fc8 #1 SMP Thu
>                              Nov 8 21:41:26 EST 2007 i686 athlon
>Alert Count                   18
>First Seen                    Thu 15 Nov 2007 09:03:32 PM PST
>Last Seen                     Fri 16 Nov 2007 02:36:59 PM PST
>Local ID                      1621d43a-a5bb-45de-92c7-d99adfa39443
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { write } for comm=useradd dev=sda14 egid=0 euid=0
>exe=/usr/sbin/useradd exit=0 fsgid=0 fsuid=0 gid=0 items=0 path=/dev/null
>pid=6204 scontext=system_u:system_r:useradd_t:s0 sgid=0
>subj=system_u:system_r:useradd_t:s0 suid=0 tclass=file
>tcontext=system_u:object_r:device_t:s0 tty=pts0 uid=0
>
>
>Summary
>    SELinux is preventing semanage (semanage_t) "getattr" to <Unknown> (fs_t).
>
>Detailed Description
>    SELinux denied access requested by semanage. It is not expected that this
>    access is required by semanage and this access may signal an intrusion
>    attempt. It is also possible that the specific version or configuration of
>    the application is causing it to require additional access.
>
>Allowing Access
>    You can generate a local policy module to allow this access - see
>    http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable
>    SELinux protection altogether. Disabling SELinux protection is not
>    recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi
>    against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:semanage_t:s0
>Target Context                system_u:object_r:fs_t:s0
>Target Objects                None [ filesystem ]
>Affected RPM Packages         
>Policy RPM                    selinux-policy-3.0.8-53.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall
>Host Name                     f8-32.localdomain
>Platform                      Linux f8-32.localdomain 2.6.23.1-49.fc8 #1 SMP Thu
>                              Nov 8 21:41:26 EST 2007 i686 athlon
>Alert Count                   21
>First Seen                    Thu 15 Nov 2007 09:05:25 PM PST
>Last Seen                     Fri 16 Nov 2007 02:36:59 PM PST
>Local ID                      a7d9b575-2685-4085-94b8-7765d0e42655
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { getattr } for comm=semanage dev=sda14 egid=0 euid=0
>exe=/usr/bin/python exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name=/ pid=6201
>scontext=system_u:system_r:semanage_t:s0 sgid=0
>subj=system_u:system_r:semanage_t:s0 suid=0 tclass=filesystem
>tcontext=system_u:object_r:fs_t:s0 tty=pts0 uid=0
>
>
>Summary
>    SELinux is preventing /usr/sbin/semodule (semanage_t) "read" to <Unknown>
>    (shadow_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/sbin/semodule. It is not expected
>    that this access is required by /usr/sbin/semodule and this access may
>    signal an intrusion attempt. It is also possible that the specific version
>    or configuration of the application is causing it to require additional
>    access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for <Unknown>, restorecon -v
>    <Unknown> If this does not work, there is currently no automatic way to
>    allow this access. Instead,  you can generate a local policy module to allow
>    this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385
>    Or you can disable SELinux protection altogether. Disabling SELinux
>    protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:semanage_t:s0
>Target Context                system_u:object_r:shadow_t:s0
>Target Objects                None [ file ]
>Affected RPM Packages         policycoreutils-2.0.31-7.fc8 [application]
>Policy RPM                    selinux-policy-3.0.8-53.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     f8-32.localdomain
>Platform                      Linux f8-32.localdomain 2.6.23.1-49.fc8 #1 SMP Thu
>                              Nov 8 21:41:26 EST 2007 i686 athlon
>Alert Count                   9
>First Seen                    Thu 15 Nov 2007 09:05:52 PM PST
>Last Seen                     Fri 16 Nov 2007 02:36:58 PM PST
>Local ID                      3e677da4-25d2-4536-ac24-3c0007af1d15
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { read } for comm=semodule dev=sda14 egid=0 euid=0
>exe=/usr/sbin/semodule exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name=passwd
>pid=6195 scontext=system_u:system_r:semanage_t:s0 sgid=0
>subj=system_u:system_r:semanage_t:s0 suid=0 tclass=file
>tcontext=system_u:object_r:shadow_t:s0 tty=pts0 uid=0
>
>
>Summary
>    SELinux is preventing /usr/sbin/groupadd (groupadd_t) "write" to /dev/null
>    (device_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/sbin/groupadd. It is not expected
>    that this access is required by /usr/sbin/groupadd and this access may
>    signal an intrusion attempt. It is also possible that the specific version
>    or configuration of the application is causing it to require additional
>    access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for /dev/null, restorecon -v
>    /dev/null If this does not work, there is currently no automatic way to
>    allow this access. Instead,  you can generate a local policy module to allow
>    this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385
>    Or you can disable SELinux protection altogether. Disabling SELinux
>    protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:groupadd_t:s0
>Target Context                system_u:object_r:device_t:s0
>Target Objects                /dev/null [ file ]
>Affected RPM Packages         shadow-utils-4.0.18.1-18.fc8 [application]
>Policy RPM                    selinux-policy-3.0.8-53.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     f8-32.localdomain
>Platform                      Linux f8-32.localdomain 2.6.23.1-49.fc8 #1 SMP Thu
>                              Nov 8 21:41:26 EST 2007 i686 athlon
>Alert Count                   6
>First Seen                    Thu 15 Nov 2007 09:03:32 PM PST
>Last Seen                     Fri 16 Nov 2007 02:35:19 PM PST
>Local ID                      76dd7786-5d99-41df-b18f-a19a3921e209
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { write } for comm=groupadd dev=sda14 egid=0 euid=0
>exe=/usr/sbin/groupadd exit=0 fsgid=0 fsuid=0 gid=0 items=0 path=/dev/null
>pid=3850 scontext=system_u:system_r:groupadd_t:s0 sgid=0
>subj=system_u:system_r:groupadd_t:s0 suid=0 tclass=file
>tcontext=system_u:object_r:device_t:s0 tty=pts0 uid=0
>
>
>Summary
>    SELinux is preventing /sbin/ldconfig (ldconfig_t) "write" to /dev/null
>    (device_t).
>
>Detailed Description
>    SELinux denied access requested by /sbin/ldconfig. It is not expected that
>    this access is required by /sbin/ldconfig and this access may signal an
>    intrusion attempt. It is also possible that the specific version or
>    configuration of the application is causing it to require additional access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for /dev/null, restorecon -v
>    /dev/null If this does not work, there is currently no automatic way to
>    allow this access. Instead,  you can generate a local policy module to allow
>    this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385
>    Or you can disable SELinux protection altogether. Disabling SELinux
>    protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:ldconfig_t:s0
>Target Context                system_u:object_r:device_t:s0
>Target Objects                /dev/null [ file ]
>Affected RPM Packages         glibc-2.7-2 [application]
>Policy RPM                    selinux-policy-3.0.8-53.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     f8-32.localdomain
>Platform                      Linux f8-32.localdomain 2.6.23.1-49.fc8 #1 SMP Thu
>                              Nov 8 21:41:26 EST 2007 i686 athlon
>Alert Count                   6
>First Seen                    Thu 15 Nov 2007 09:03:40 PM PST
>Last Seen                     Fri 16 Nov 2007 02:34:51 PM PST
>Local ID                      a1661165-1fe4-475a-8a47-dddd5e7ff655
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { write } for comm=ldconfig dev=sda14 egid=0 euid=0
>exe=/sbin/ldconfig exit=0 fsgid=0 fsuid=0 gid=0 items=0 path=/dev/null pid=3750
>scontext=system_u:system_r:ldconfig_t:s0 sgid=0
>subj=system_u:system_r:ldconfig_t:s0 suid=0 tclass=file
>tcontext=system_u:object_r:device_t:s0 tty=pts0 uid=0
>

Actions: View

Attachments on bug 343851: 263591 | 263761 | 263841 | 263851