Attachment 279191 Details for Bug 413421 – .xsession timestamp error

.xsession timestamp error

pam-timestamp-xsession.txt (text/plain), 2.18 KB, created by Jim Cornette on 2007-12-06 04:44:17 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jim Cornette

Created: 2007-12-06 04:44:17 UTC

Size: 2.18 KB

patch

obsolete

>Summary
>    SELinux is preventing the /sbin/pam_timestamp_check from using potentially
>    mislabeled files (/home/jim/.xsession-errors).
>
>Detailed Description
>    SELinux has denied /sbin/pam_timestamp_check access to potentially
>    mislabeled file(s) (/home/jim/.xsession-errors).  This means that SELinux
>    will not allow /sbin/pam_timestamp_check to use these files.  It is common
>    for users to edit files in their home directory or tmp directories and then
>    move (mv) them to system directories.  The problem is that the files end up
>    with the wrong file context which confined applications are not allowed to
>    access.
>
>Allowing Access
>    If you want /sbin/pam_timestamp_check to access this files, you need to
>    relabel them using restorecon -v /home/jim/.xsession-errors.  You might want
>    to relabel the entire directory using restorecon -R -v /home/jim.
>
>Additional Information        
>
>Source Context                system_u:system_r:pam_t
>Target Context                system_u:object_r:user_home_t
>Target Objects                /home/jim/.xsession-errors [ file ]
>Affected RPM Packages         pam-0.99.8.1-12.fc9 [application]
>Policy RPM                    selinux-policy-3.2.2-1.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Permissive
>Plugin Name                   plugins.home_tmp_bad_labels
>Host Name                     HP-JCF7
>Platform                      Linux HP-JCF7 2.6.23.8-63.fc8 #1 SMP Wed Nov 21
>                              18:51:08 EST 2007 i686 athlon
>Alert Count                   1
>First Seen                    Wed 05 Dec 2007 09:45:30 PM EST
>Last Seen                     Wed 05 Dec 2007 09:45:30 PM EST
>Local ID                      f1b31b8a-7f47-427c-af59-43bd422067a8
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { read append } for comm=pam_timestamp_c dev=sda2 egid=500 euid=0
>exe=/sbin/pam_timestamp_check exit=0 fsgid=500 fsuid=0 gid=500 items=0
>path=/home/jim/.xsession-errors pid=3916 scontext=system_u:system_r:pam_t:s0
>sgid=500 subj=system_u:system_r:pam_t:s0 suid=0 tclass=file
>tcontext=system_u:object_r:user_home_t:s0 tty=(none) uid=500
>

Actions: View

Attachments on bug 413421: 279191