Attachment 295376 Details for Bug 433407 – Alerts from mount and umount

Alerts from mount and umount

alerts.mount (text/plain), 4.27 KB, created by Ian Kent on 2008-02-20 03:26:22 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ian Kent

Created: 2008-02-20 03:26:22 UTC

Size: 4.27 KB

patch

obsolete

>Summary
>    SELinux prevented /bin/umount from mounting on the file or directory
>    "/proc/25131/mounts" (type "automount_t").
>
>Detailed Description
>    SELinux prevented /bin/umount from mounting a filesystem on the file or
>    directory "/proc/25131/mounts" of type "automount_t". By default SELinux
>    limits the mounting of filesystems to only some files or directories (those
>    with types that have the mountpoint attribute). The type "automount_t" does
>    not have this attribute. You can either relabel the file or directory or set
>    the boolean "allow_mount_anyfile" to true to allow mounting on any file or
>    directory.
>
>Allowing Access
>    Changing the "allow_mount_anyfile" boolean to true will allow this access:
>    "setsebool -P allow_mount_anyfile=1."
>
>    The following command will allow this access:
>    setsebool -P allow_mount_anyfile=1
>
>Additional Information        
>
>Source Context                system_u:system_r:mount_t:s0
>Target Context                system_u:system_r:automount_t:s0
>Target Objects                /proc/25131/mounts [ file ]
>Affected RPM Packages         util-linux-ng-2.13.1-1.fc8 [application]
>Policy RPM                    selinux-policy-3.0.8-81.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.allow_mount_anyfile
>Host Name                     raven.themaw.net
>Platform                      Linux raven.themaw.net 2.6.23.15-137.fc8 #1 SMP
>                              Sun Feb 10 17:48:34 EST 2008 i686 athlon
>Alert Count                   1
>First Seen                    Wed Feb 20 12:06:46 2008
>Last Seen                     Wed Feb 20 12:06:46 2008
>Local ID                      2aa36f63-44b1-4642-910e-4cfc94660e32
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { read } for comm=umount dev=proc egid=0 euid=0 exe=/bin/umount
>exit=0 fsgid=0 fsuid=0 gid=0 items=0 path=/proc/25131/mounts pid=25170
>scontext=system_u:system_r:mount_t:s0 sgid=0 subj=system_u:system_r:mount_t:s0
>suid=0 tclass=file tcontext=system_u:system_r:automount_t:s0 tty=(none) uid=0
>
>
>Summary
>    SELinux prevented /bin/mount from mounting on the file or directory
>    "/proc/25203/mounts" (type "automount_t").
>
>Detailed Description
>    SELinux prevented /bin/mount from mounting a filesystem on the file or
>    directory "/proc/25203/mounts" of type "automount_t". By default SELinux
>    limits the mounting of filesystems to only some files or directories (those
>    with types that have the mountpoint attribute). The type "automount_t" does
>    not have this attribute. You can either relabel the file or directory or set
>    the boolean "allow_mount_anyfile" to true to allow mounting on any file or
>    directory.
>
>Allowing Access
>    Changing the "allow_mount_anyfile" boolean to true will allow this access:
>    "setsebool -P allow_mount_anyfile=1."
>
>    The following command will allow this access:
>    setsebool -P allow_mount_anyfile=1
>
>Additional Information        
>
>Source Context                system_u:system_r:mount_t:s0
>Target Context                system_u:system_r:automount_t:s0
>Target Objects                /proc/25203/mounts [ file ]
>Affected RPM Packages         util-linux-ng-2.13.1-1.fc8 [application]
>Policy RPM                    selinux-policy-3.0.8-81.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.allow_mount_anyfile
>Host Name                     raven.themaw.net
>Platform                      Linux raven.themaw.net 2.6.23.15-137.fc8 #1 SMP
>                              Sun Feb 10 17:48:34 EST 2008 i686 athlon
>Alert Count                   7
>First Seen                    Wed Feb 20 12:13:12 2008
>Last Seen                     Wed Feb 20 12:13:18 2008
>Local ID                      1886067e-8dfa-4c07-b445-5fb6ee1dfac2
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { read } for comm=mount dev=proc egid=0 euid=0 exe=/bin/mount exit=0
>fsgid=0 fsuid=0 gid=0 items=0 path=/proc/25203/mounts pid=26664
>scontext=system_u:system_r:mount_t:s0 sgid=0 subj=system_u:system_r:mount_t:s0
>suid=0 tclass=file tcontext=system_u:system_r:automount_t:s0 tty=(none) uid=0
>
>

Actions: View

Attachments on bug 433407: 295375 | 295376