Attachment 293366 Details for Bug 430437 – SELinux is preventing console-kit-dae(/usr/sbin/console-kit-daemon) (consolekit_t) "read" to <Unknown> (usr_t).

SELinux is preventing console-kit-dae(/usr/sbin/console-kit-daemon) (consolekit_t) "read" to <Unknown> (usr_t).

console-kit-read-consolekit_t.txt (text/plain), 2.74 KB, created by Jim Cornette on 2008-01-30 04:34:43 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jim Cornette

Created: 2008-01-30 04:34:43 UTC

Size: 2.74 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing console-kit-dae(/usr/sbin/console-kit-daemon)
>(consolekit_t) "read" to <Unknown> (usr_t).
>
>Detailed Description:
>
>SELinux denied access requested by
>console-kit-dae(/usr/sbin/console-kit-daemon). It is not expected that this
>access is required by console-kit-dae(/usr/sbin/console-kit-daemon) and this
>access may signal an intrusion attempt. It is also possible that the specific
>version or configuration of the application is causing it to require additional
>access.
>
>Allowing Access:
>
>Sometimes labeling problems can cause SELinux denials. You could try to restore
>the default system file context for <Unknown>,
>
>restorecon -v <Unknown>
>
>If this does not work, there is currently no automatic way to allow this access.
>Instead, you can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:consolekit_t
>Target Context                system_u:object_r:usr_t
>Target Objects                None [ file ]
>Source                        console-kit-dae(/usr/sbin/console-kit-daemon)
>Port                          <Unknown>
>Host                          HP-JCF7
>Source RPM Packages           
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.2.5-20.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall_file
>Host Name                     HP-JCF7
>Platform                      Linux HP-JCF7 2.6.23.14-107.fc8 #1 SMP Mon Jan 14
>                              21:37:30 EST 2008 i686 athlon
>Alert Count                   10
>First Seen                    Tue 29 Jan 2008 11:19:45 PM EST
>Last Seen                     Tue 29 Jan 2008 11:19:45 PM EST
>Local ID                      67ddd534-4394-45c9-8c3b-ad1bf425475a
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=HP-JCF7 type=AVC msg=audit(1201666785.234:41): avc:  denied  { read } for  pid=2140 comm="console-kit-dae" name="hal-power.policy" dev=sda6 ino=812815 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file
>
>host=HP-JCF7 type=SYSCALL msg=audit(1201666785.234:41): arch=40000003 syscall=5 success=no exit=-13 a0=89e24f0 a1=8000 a2=0 a3=8000 items=0 ppid=1 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:consolekit_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 430437: 293096 | 293098 | 293099 | 293100 | 293102 | 293103 | 293104 | 293105 | 293106 | 293107 | 293108 | 293109 | 293110 | 293111 | 293112 | 293113 | 293114 | 293115 | 293116 | 293118 | 293119 | 293120 | 293160 | 293161 | 293162 | 293365 | 293366