Attachment 293098 Details for Bug 430437 – SELinux is preventing console-kit-dae(/usr/sbin/console-kit-daemon) (system_dbusd_t) "sys_nice" to <Unknown> (system_dbusd_t). Detailed Description

SELinux is preventing console-kit-dae(/usr/sbin/console-kit-daemon) (system_dbusd_t) "sys_nice" to <Unknown> (system_dbusd_t). Detailed Description

console-kit-deamon-sys_nice.txt (text/plain), 2.63 KB, created by Jim Cornette on 2008-01-28 02:27:25 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jim Cornette

Created: 2008-01-28 02:27:25 UTC

Size: 2.63 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing console-kit-dae(/usr/sbin/console-kit-daemon)
>(system_dbusd_t) "sys_nice" to <Unknown> (system_dbusd_t).
>
>Detailed Description:
>
>[SELinux in permissive mode, the operation would have been denied but was
>permitted due to enforcing mode.]
>
>SELinux denied access requested by
>console-kit-dae(/usr/sbin/console-kit-daemon). It is not expected that this
>access is required by console-kit-dae(/usr/sbin/console-kit-daemon) and this
>access may signal an intrusion attempt. It is also possible that the specific
>version or configuration of the application is causing it to require additional
>access.
>
>Allowing Access:
>
>You can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:system_dbusd_t
>Target Context                system_u:system_r:system_dbusd_t
>Target Objects                None [ capability ]
>Source                        console-kit-dae(/usr/sbin/console-kit-daemon)
>Port                          <Unknown>
>Host                          HP-JCF7
>Source RPM Packages           
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.2.5-19.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Permissive
>Plugin Name                   catchall
>Host Name                     HP-JCF7
>Platform                      Linux HP-JCF7 2.6.23.14-107.fc8 #1 SMP Mon Jan 14
>                              21:37:30 EST 2008 i686 athlon
>Alert Count                   4
>First Seen                    Sun 27 Jan 2008 03:42:10 PM EST
>Last Seen                     Sun 27 Jan 2008 08:53:57 PM EST
>Local ID                      106f9a89-0d2e-4cdb-9145-85d20583f4a6
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=HP-JCF7 type=AVC msg=audit(1201485237.126:48): avc:  denied  { sys_nice } for  pid=2166 comm="console-kit-dae" capability=23 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=capability
>
>host=HP-JCF7 type=SYSCALL msg=audit(1201485237.126:48): arch=40000003 syscall=3 success=yes exit=187 a0=e a1=bfd1dc68 a2=1000 a3=0 items=0 ppid=1 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 430437: 293096 | 293098 | 293099 | 293100 | 293102 | 293103 | 293104 | 293105 | 293106 | 293107 | 293108 | 293109 | 293110 | 293111 | 293112 | 293113 | 293114 | 293115 | 293116 | 293118 | 293119 | 293120 | 293160 | 293161 | 293162 | 293365 | 293366