Attachment 290159 Details for Bug 244302 – sealert output

sealert output

sealert.txt (text/plain), 2.35 KB, created by Mika Silander on 2007-12-20 15:32:21 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Mika Silander

Created: 2007-12-20 15:32:21 UTC

Size: 2.35 KB

patch

obsolete

>sealert -l 5f9931ef-36e8-43bd-b5ab-19de1cbc470a
>
>Summary
>    SELinux is preventing /usr/sbin/openvpn (openvpn_t) "write" to openvpn-
>    status.log (openvpn_etc_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/sbin/openvpn. It is not expected
>    that this access is required by /usr/sbin/openvpn and this access may signal
>    an intrusion attempt. It is also possible that the specific version or
>    configuration of the application is causing it to require additional access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for openvpn-status.log, restorecon
>    -v openvpn-status.log If this does not work, there is currently no automatic
>    way to allow this access. Instead,  you can generate a local policy module
>    to allow this access - see http://fedora.redhat.com/docs/selinux-faq-
>    fc5/#id2961385 Or you can disable SELinux protection altogether. Disabling
>    SELinux protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information
>
>Source Context                user_u:system_r:openvpn_t
>Target Context                user_u:object_r:openvpn_etc_t
>Target Objects                openvpn-status.log [ file ]
>Affected RPM Packages         openvpn-2.1-0.19.rc4.fc7 [application]
>Policy RPM                    selinux-policy-2.6.4-61.fc7
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     garza.unizar.es
>Platform                      Linux garza.unizar.es 2.6.21-1.3194.fc7 #1 SMP Wed
>                              May 23 22:35:01 EDT 2007 i686 athlon
>Alert Count                   3
>First Seen                    Thu Dec 20 12:37:09 2007
>Last Seen                     Thu Dec 20 16:14:21 2007
>Local ID                      5f9931ef-36e8-43bd-b5ab-19de1cbc470a
>Line Numbers
>
>Raw Audit Messages
>
>avc: denied { write } for comm="openvpn" dev=dm-1 egid=0 euid=0
>exe="/usr/sbin/openvpn" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="openvpn-
>status.log" pid=2910 scontext=user_u:system_r:openvpn_t:s0 sgid=0
>subj=user_u:system_r:openvpn_t:s0 suid=0 tclass=file
>tcontext=user_u:object_r:openvpn_etc_t:s0 tty=pts0 uid=0
>

Actions: View

Attachments on bug 244302: 290159