Attachment 293096 Details for Bug 430437 – console-kit-daemon error search

console-kit-daemon error search

console-kit-deamon.txt (text/plain), 3.11 KB, created by Jim Cornette on 2008-01-28 02:04:51 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jim Cornette

Created: 2008-01-28 02:04:51 UTC

Size: 3.11 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing console-kit-dae(/usr/sbin/console-kit-daemon)
>(system_dbusd_t) "search" to <Unknown> (polkit_auth_t).
>
>Detailed Description:
>
>[SELinux in permissive mode, the operation would have been denied but was
>permitted due to enforcing mode.]
>
>SELinux denied access requested by
>console-kit-dae(/usr/sbin/console-kit-daemon). It is not expected that this
>access is required by console-kit-dae(/usr/sbin/console-kit-daemon) and this
>access may signal an intrusion attempt. It is also possible that the specific
>version or configuration of the application is causing it to require additional
>access.
>
>Allowing Access:
>
>Sometimes labeling problems can cause SELinux denials. You could try to restore
>the default system file context for <Unknown>,
>
>restorecon -v <Unknown>
>
>If this does not work, there is currently no automatic way to allow this access.
>Instead, you can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:system_dbusd_t
>Target Context                system_u:system_r:polkit_auth_t
>Target Objects                None [ dir ]
>Source                        console-kit-dae(/usr/sbin/console-kit-daemon)
>Port                          <Unknown>
>Host                          HP-JCF7
>Source RPM Packages           
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.2.5-19.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Permissive
>Plugin Name                   catchall_file
>Host Name                     HP-JCF7
>Platform                      Linux HP-JCF7 2.6.23.14-107.fc8 #1 SMP Mon Jan 14
>                              21:37:30 EST 2008 i686 athlon
>Alert Count                   2
>First Seen                    Sun 27 Jan 2008 03:42:11 PM EST
>Last Seen                     Sun 27 Jan 2008 08:53:57 PM EST
>Local ID                      98d3da88-ac4a-4c5c-a911-c7d812003f0b
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=HP-JCF7 type=AVC msg=audit(1201485237.122:46): avc:  denied  { search } for  pid=2166 comm="console-kit-dae" name="2643" dev=proc ino=11567 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:polkit_auth_t:s0 tclass=dir
>
>host=HP-JCF7 type=AVC msg=audit(1201485237.122:46): avc:  denied  { read } for  pid=2166 comm="console-kit-dae" name="stat" dev=proc ino=11578 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:polkit_auth_t:s0 tclass=file
>
>host=HP-JCF7 type=SYSCALL msg=audit(1201485237.122:46): arch=40000003 syscall=5 success=yes exit=14 a0=8fcf970 a1=8000 a2=0 a3=8000 items=0 ppid=1 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 430437: 293096 | 293098 | 293099 | 293100 | 293102 | 293103 | 293104 | 293105 | 293106 | 293107 | 293108 | 293109 | 293110 | 293111 | 293112 | 293113 | 293114 | 293115 | 293116 | 293118 | 293119 | 293120 | 293160 | 293161 | 293162 | 293365 | 293366