Attachment 291501 Details for Bug 428569 – SELinux alert

SELinux alert

rb_selinux_alert.txt (text/plain), 2.39 KB, created by Martin Jürgens on 2008-01-13 14:23:47 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Martin Jürgens

Created: 2008-01-13 14:23:47 UTC

Size: 2.39 KB

patch

obsolete

>Zusammenfassung
>    SELinux hindert /usr/bin/rhythmbox an der Ãnderung dieses Zugriffs Schutz
>    des Freispeicherbereichs.
>
>Detaillierte Beschreibung
>    The /usr/bin/rhythmbox application attempted to change the access protection
>    of memory on the heap (e.g., allocated using malloc).  This is a potential
>    security problem.  Applications should not be doing this. Applications are
>    sometimes coded incorrectly and request this permission.  The
>    http://people.redhat.com/drepper/selinux-mem.html web page explains how to
>    remove this requirement.  If /usr/bin/rhythmbox does not work and you need
>    it to work, you can configure SELinux temporarily to allow this access until
>    the application is fixed. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Zugriff erlauben
>    Falls Sie mit /usr/bin/rhythmbox fortfahren mÃ¶chten, mÃ¼ssen Sie
>    allow_execheap Boolesch aktivieren.  Hinweis: Dieser Boolesch wirkt sich auf
>    alle Anwendungen des Systems aus.
>
>    Folgender Befehl erlaubt diesen Zugriff:
>    setsebool -P allow_execheap=1
>
>ZusÃ¤tzliche Informationen    
>
>Quellkontext                  system_u:system_r:unconfined_execmem_t:s0
>Zielkontext                   system_u:system_r:unconfined_execmem_t:s0
>Zielobjekte                   None [ process ]
>Betroffene RPM-Pakete         rhythmbox-0.11.3-6.fc8 [application]
>RPM-Richtlinie                selinux-policy-3.0.8-73.fc8
>SELinux aktiviert             True
>Richtlinienversion            targeted
>MLS aktiviert                 True
>Enforcing-Modus               Enforcing
>Plugin-Name                   plugins.allow_execheap
>Hostname                      medora
>Plattform                     Linux medora 2.6.23.9-85.fc8 #1 SMP Fri Dec 7
>                              15:49:59 EST 2007 i686 athlon
>Anzahl der Alarme             1
>First Seen                    So 13 Jan 2008 14:53:35 CET
>Last Seen                     So 13 Jan 2008 14:53:35 CET
>Local ID                      40ac9aa5-9610-47cf-be5e-e12d133689d9
>Zeilennummern                 
>
>Raw-Audit-Meldungen           
>
>avc: denied { execheap } for comm=rhythmbox egid=500 euid=500
>exe=/usr/bin/rhythmbox exit=-13 fsgid=500 fsuid=500 gid=500 items=0 pid=3567
>scontext=system_u:system_r:unconfined_execmem_t:s0 sgid=500
>subj=system_u:system_r:unconfined_execmem_t:s0 suid=500 tclass=process
>tcontext=system_u:system_r:unconfined_execmem_t:s0 tty=(none) uid=500
>

Actions: View

Attachments on bug 428569: 291501