Attachment 293114 Details for Bug 430437 – SELinux prevented console-kit-dae(/usr/sbin/console-kit-daemon) from using the terminal <Unknown>

SELinux prevented console-kit-dae(/usr/sbin/console-kit-daemon) from using the terminal <Unknown>

console-kit-terminal.txt (text/plain), 2.66 KB, created by Jim Cornette on 2008-01-28 02:48:00 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jim Cornette

Created: 2008-01-28 02:48:00 UTC

Size: 2.66 KB

patch

obsolete

>
>Summary:
>
>SELinux prevented console-kit-dae(/usr/sbin/console-kit-daemon) from using the
>terminal <Unknown>.
>
>Detailed Description:
>
>[SELinux in permissive mode, the operation would have been denied but was
>permitted due to enforcing mode.]
>
>SELinux prevented console-kit-dae(/usr/sbin/console-kit-daemon) from using the
>terminal <Unknown>. In most cases daemons do not need to interact with the
>terminal, usually these avc messages can be ignored. All of the confined daemons
>should have dontaudit rules around using the terminal. Please file a bug report
>(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this selinux-policy.
>If you would like to allow all daemons to interact with the terminal, you can
>turn on the allow_daemons_use_tty boolean.
>
>Allowing Access:
>
>Changing the "allow_daemons_use_tty" boolean to true will allow this access:
>"setsebool -P allow_daemons_use_tty=1."
>
>The following command will allow this access:
>
>setsebool -P allow_daemons_use_tty=1
>
>Additional Information:
>
>Source Context                system_u:system_r:system_dbusd_t
>Target Context                system_u:object_r:tty_device_t
>Target Objects                None [ chr_file ]
>Source                        console-kit-dae(/usr/sbin/console-kit-daemon)
>Port                          <Unknown>
>Host                          HP-JCF7
>Source RPM Packages           
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.2.5-19.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Permissive
>Plugin Name                   allow_daemons_use_tty
>Host Name                     HP-JCF7
>Platform                      Linux HP-JCF7 2.6.23.14-107.fc8 #1 SMP Mon Jan 14
>                              21:37:30 EST 2008 i686 athlon
>Alert Count                   2
>First Seen                    Sun 27 Jan 2008 03:42:05 PM EST
>Last Seen                     Sun 27 Jan 2008 08:52:05 PM EST
>Local ID                      d461fb89-752b-4923-96a8-5edc0adf8e9b
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=HP-JCF7 type=AVC msg=audit(1201485125.285:14): avc:  denied  { read } for  pid=2166 comm="console-kit-dae" name="tty0" dev=tmpfs ino=218 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>
>host=HP-JCF7 type=SYSCALL msg=audit(1201485125.285:14): arch=40000003 syscall=5 success=yes exit=12 a0=80626d6 a1=100 a2=5e8120 a3=ffffffff items=0 ppid=1 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 430437: 293096 | 293098 | 293099 | 293100 | 293102 | 293103 | 293104 | 293105 | 293106 | 293107 | 293108 | 293109 | 293110 | 293111 | 293112 | 293113 | 293114 | 293115 | 293116 | 293118 | 293119 | 293120 | 293160 | 293161 | 293162 | 293365 | 293366