Attachment 289702 Details for Bug 422891 – SELinux Alert

SELinux Alert

sealert-9f0b4641-5392-4b5a-8fa9-e91d10ae75e9.txt (text/plain), 2.13 KB, created by Tom "spot" Callaway on 2007-12-15 18:53:57 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Tom "spot" Callaway

Created: 2007-12-15 18:53:57 UTC

Size: 2.13 KB

patch

obsolete

>Summary
>    SELinux is preventing dbus-daemon (xdm_dbusd_t) "search" to <Unknown>
>    (xdm_var_lib_t).
>
>Detailed Description
>    SELinux denied access requested by dbus-daemon. It is not expected that this
>    access is required by dbus-daemon and this access may signal an intrusion
>    attempt. It is also possible that the specific version or configuration of
>    the application is causing it to require additional access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for <Unknown>, restorecon -v
>    <Unknown> If this does not work, there is currently no automatic way to
>    allow this access. Instead,  you can generate a local policy module to allow
>    this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385
>    Or you can disable SELinux protection altogether. Disabling SELinux
>    protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:xdm_dbusd_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:xdm_var_lib_t:s0
>Target Objects                None [ dir ]
>Affected RPM Packages         
>Policy RPM                    selinux-policy-3.2.3-2.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Permissive
>Plugin Name                   plugins.catchall_file
>Host Name                     localhost
>Platform                      Linux localhost 2.6.24-0.107.rc5.git3.fc9 #1 SMP
>                              Fri Dec 14 12:15:01 EST 2007 x86_64 x86_64
>Alert Count                   19
>First Seen                    Wed Dec  5 00:03:51 2007
>Last Seen                     Sat Dec 15 13:14:46 2007
>Local ID                      9f0b4641-5392-4b5a-8fa9-e91d10ae75e9
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { search } for comm=dbus-daemon dev=dm-0 name=gdm pid=2640
>scontext=system_u:system_r:xdm_dbusd_t:s0-s0:c0.c1023 tclass=dir
>tcontext=system_u:object_r:xdm_var_lib_t:s0
>
>

Actions: View

Attachments on bug 422891: 286561 | 289702