Attachment 268011 Details for Bug 397831 – selinux message

selinux message

selinux_alert.txt (text/plain), 2.18 KB, created by mtkoll on 2007-11-24 13:37:48 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: mtkoll

Created: 2007-11-24 13:37:48 UTC

Size: 2.18 KB

patch

obsolete

>Summary
>    SELinux is preventing the /usr/libexec/ck-get-x11-server-pid from using
>    potentially mislabeled files (.X11-unix).
>
>Detailed Description
>    SELinux has denied /usr/libexec/ck-get-x11-server-pid access to potentially
>    mislabeled file(s) (.X11-unix).  This means that SELinux will not allow
>    /usr/libexec/ck-get-x11-server-pid to use these files.  It is common for
>    users to edit files in their home directory or tmp directories and then move
>    (mv) them to system directories.  The problem is that the files end up with
>    the wrong file context which confined applications are not allowed to
>    access.
>
>Allowing Access
>    If you want /usr/libexec/ck-get-x11-server-pid to access this files, you
>    need to relabel them using restorecon -v .X11-unix.  You might want to
>    relabel the entire directory using restorecon -R -v .
>
>Additional Information        
>
>Source Context                system_u:system_r:consolekit_t
>Target Context                system_u:object_r:xdm_tmp_t
>Target Objects                .X11-unix [ dir ]
>Affected RPM Packages         ConsoleKit-x11-0.2.1-2.fc7 [application]
>Policy RPM                    selinux-policy-2.6.4-8.fc7
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.home_tmp_bad_labels
>Host Name                     localhost.localdomain
>Platform                      Linux localhost.localdomain 2.6.21-1.3194.fc7 #1
>                              SMP Wed May 23 22:35:01 EDT 2007 i686 athlon
>Alert Count                   1
>First Seen                    Tue 01 Jan 2002 05:55:24 AM IST
>Last Seen                     Tue 01 Jan 2002 05:55:24 AM IST
>Local ID                      22ad312e-994f-4c03-94c2-103261b72205
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { search } for comm="ck-get-x11-serv" dev=dm-0 egid=0 euid=0
>exe="/usr/libexec/ck-get-x11-server-pid" exit=-13 fsgid=0 fsuid=0 gid=0 items=0
>name=".X11-unix" pid=3032 scontext=system_u:system_r:consolekit_t:s0 sgid=0
>subj=system_u:system_r:consolekit_t:s0 suid=0 tclass=dir
>tcontext=system_u:object_r:xdm_tmp_t:s0 tty=(none) uid=0
>

Actions: View

Attachments on bug 397831: 268011 | 277221