Attachment 273631 Details for Bug 389841 – settroubleshoot output

settroubleshoot output

selinux_alert_27-11-07-10.10.txt (text/plain), 2.64 KB, created by morgan read on 2007-11-30 09:53:11 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: morgan read

Created: 2007-11-30 09:53:11 UTC

Size: 2.64 KB

patch

obsolete

>Summary
>    SELinux is preventing sendmail (sendmail_t) "getattr" to /home/morgan
>    (unconfined_home_dir_t).
>
>Detailed Description
>    SELinux denied access requested by sendmail. /home/morgan may be a
>    mislabeled.  /home/morgan default SELinux type is <B>user_home_dir_t</B>,
>    while its current type is <B>unconfined_home_dir_t</B>. Changing this file
>    back to the default type, may fix your problem. File contexts can get
>    assigned to a file can following ways.  <ul> <li>Files created in a
>    directory recieve the file context of the parent directory by default.
>    <li>Users can change the file context on a file using tools like chcon, or
>    restorecon. <li>The kernel can decide via policy that an application running
>    as context A Creating a file in a directory labeled B will create files
>    labeled C. </ul> This file could have been mislabeled either by user error,
>    or if an normally confined application was run under the wrong domain. Of
>    course this could also indicate a bug in SELinux, in that the file should
>    not be labeled with this type.  If you believe this is a bug, please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Allowing Access
>    You can restore the default system context to this file by executing the
>    restorecon command.  restorecon /home/morgan, if this file is a directory,
>    you can recursively restore using restorecon -R /home/morgan.
>
>    The following command will allow this access:
>    restorecon /home/morgan
>
>Additional Information        
>
>Source Context                system_u:system_r:sendmail_t
>Target Context                unconfined_u:object_r:unconfined_home_dir_t
>Target Objects                /home/morgan [ dir ]
>Affected RPM Packages         
>Policy RPM                    selinux-policy-3.0.8-56.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.restorecon
>Host Name                     morgansmachine.lan
>Platform                      Linux morgansmachine.lan 2.6.23.1-49.fc8 #1 SMP
>                              Thu Nov 8 21:41:26 EST 2007 i686 i686
>Alert Count                   9
>First Seen                    Fri 23 Nov 2007 07:04:40 PM NZDT
>Last Seen                     Tue 27 Nov 2007 10:10:04 AM NZDT
>Local ID                      96c556ec-4c09-4641-90d0-8c4be7082c66
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { getattr } for comm=sendmail dev=dm-1 path=/home/morgan pid=7760
>scontext=system_u:system_r:sendmail_t:s0 tclass=dir
>tcontext=unconfined_u:object_r:unconfined_home_dir_t:s0
>

Actions: View

Attachments on bug 389841: 273631