Attachment 292009 Details for Bug 429141 – report error's message

report error's message

selinux_alert.txt (text/plain), 2.17 KB, created by SPL on 2008-01-17 15:53:59 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: SPL

Created: 2008-01-17 15:53:59 UTC

Size: 2.17 KB

patch

obsolete

>Summary
>    SELinux is preventing the sh (NetworkManager_t) from executing <Unknown>.
>
>Detailed Description
>    SELinux has denied the sh from executing <Unknown>. If sh is supposed to be
>    able to execute <Unknown>, this could be a labeling problem.  Most confined
>    domains are allowed to execute files labeled bin_t.  So you could change the
>    labeling on this file to bin_t and retry the application.  If this sh is not
>    supposed to execute <Unknown>, this could signal a intrusion attempt.
>
>Allowing Access
>    If you want to allow sh to execute <Unknown>: chcon -t bin_t <Unknown> If
>    this fix works, please update the file context on disk, with the following
>    command: semanage fcontext -a -t bin_t <Unknown> Please specify the full
>    path to the executable, Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this selinux-
>    policy to make sure this becomes the default labeling.
>
>Additional Information        
>
>Source Context                system_u:system_r:NetworkManager_t:s0
>Target Context                unconfined_u:object_r:etc_t:s0
>Target Objects                None [ file ]
>Affected RPM Packages         
>Policy RPM                    selinux-policy-3.0.8-73.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.execute
>Host Name                     localhost.localdomain
>Platform                      Linux localhost.localdomain 2.6.23.14 #1 SMP Thu
>                              Jan 17 12:06:55 IST 2008 i686 i686
>Alert Count                   10
>First Seen                    IST 22:25:39 2008 ×× × 16 ×'
>Last Seen                     IST 17:45:09 2008 ×× × 17 ×'
>Local ID                      a703f3de-6f84-48e3-9462-98ef34daf4df
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { execute } for comm=sh dev=dm-0 egid=0 euid=0 exe=/bin/bash
>exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name=firestarter pid=2988
>scontext=system_u:system_r:NetworkManager_t:s0 sgid=0
>subj=system_u:system_r:NetworkManager_t:s0 suid=0 tclass=file
>tcontext=unconfined_u:object_r:etc_t:s0 tty=(none) uid=0
>

Actions: View

Attachments on bug 429141: 292009