Attachment 293119 Details for Bug 430437 – SELinux is preventing console-kit-dae(/usr/sbin/console-kit-daemon) (system_dbusd_t) "getsched" to <Unknown> (system_dbusd_t).

SELinux is preventing console-kit-dae(/usr/sbin/console-kit-daemon) (system_dbusd_t) "getsched" to <Unknown> (system_dbusd_t).

setattr-sysdbus.txt (text/plain), 2.86 KB, created by Jim Cornette on 2008-01-28 02:52:46 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jim Cornette

Created: 2008-01-28 02:52:46 UTC

Size: 2.86 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing console-kit-dae(/usr/sbin/console-kit-daemon)
>(system_dbusd_t) "setattr" to <Unknown> (var_log_t).
>
>Detailed Description:
>
>[SELinux in permissive mode, the operation would have been denied but was
>permitted due to enforcing mode.]
>
>SELinux denied access requested by
>console-kit-dae(/usr/sbin/console-kit-daemon). It is not expected that this
>access is required by console-kit-dae(/usr/sbin/console-kit-daemon) and this
>access may signal an intrusion attempt. It is also possible that the specific
>version or configuration of the application is causing it to require additional
>access.
>
>Allowing Access:
>
>Sometimes labeling problems can cause SELinux denials. You could try to restore
>the default system file context for <Unknown>,
>
>restorecon -v <Unknown>
>
>If this does not work, there is currently no automatic way to allow this access.
>Instead, you can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:system_dbusd_t
>Target Context                unconfined_u:object_r:var_log_t
>Target Objects                None [ file ]
>Source                        console-kit-dae(/usr/sbin/console-kit-daemon)
>Port                          <Unknown>
>Host                          HP-JCF7
>Source RPM Packages           
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.2.5-19.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Permissive
>Plugin Name                   catchall_file
>Host Name                     HP-JCF7
>Platform                      Linux HP-JCF7 2.6.23.14-107.fc8 #1 SMP Mon Jan 14
>                              21:37:30 EST 2008 i686 athlon
>Alert Count                   2
>First Seen                    Sun 27 Jan 2008 03:42:05 PM EST
>Last Seen                     Sun 27 Jan 2008 08:52:05 PM EST
>Local ID                      c82bf713-d326-4081-94b5-53006f606bb9
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=HP-JCF7 type=AVC msg=audit(1201485125.284:12): avc:  denied  { setattr } for  pid=2166 comm="console-kit-dae" name="history" dev=sda6 ino=1236525 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=unconfined_u:object_r:var_log_t:s0 tclass=file
>
>host=HP-JCF7 type=SYSCALL msg=audit(1201485125.284:12): arch=40000003 syscall=207 success=yes exit=0 a0=a a1=0 a2=0 a3=a items=0 ppid=1 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 430437: 293096 | 293098 | 293099 | 293100 | 293102 | 293103 | 293104 | 293105 | 293106 | 293107 | 293108 | 293109 | 293110 | 293111 | 293112 | 293113 | 293114 | 293115 | 293116 | 293118 | 293119 | 293120 | 293160 | 293161 | 293162 | 293365 | 293366