Attachment 298331 Details for Bug 429813 – selinux_alert.txt

selinux_alert.txt

selinux_alert.txt (text/plain), 2.71 KB, created by Jens Petersen on 2008-03-18 04:24:44 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jens Petersen

Created: 2008-03-18 04:24:44 UTC

Size: 2.71 KB

patch

obsolete

>
>è¦ç´:
>
>SELinux is preventing tzdata-update (tzdata_t) "read" to pipe
>(unconfined_notrans_t).
>
>è©³ç´°èª¬æ:
>
>SELinux denied access requested by tzdata-update. It is not expected that this
>access is required by tzdata-update and this access may signal an intrusion
>attempt. It is also possible that the specific version or configuration of the
>application is causing it to require additional access.
>
>ã¢ã¯ã»ã¹ãè¨±å¯:
>
>You can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>è¿½å æå ±:
>
>ã½ã¼ã¹ã³ã³ããã¹ã   unconfined_u:unconfined_r:tzdata_t:s0-s0:c0.c1023
>ã¿ã¼ã²ããã³ã³ããã unconfined_u:unconfined_r:unconfined_notrans_t:s0-
>                              s0:c0.c1023
>ã¿ã¼ã²ãããªãã¸ã§ã pipe [ fifo_file ]
>Source                        tzdata-update
>Source Path                   /usr/sbin/tzdata-update
>Port                          <ä¸æ>
>Host                          localhost.localdomain
>Source RPM Packages           glibc-common-2.7.90-9
>Target RPM Packages           
>ããªã·ã¼ RPM              selinux-policy-3.3.1-16.fc9
>Selinux æå¹å             True
>ããªã·ã¼ã¿ã¤ã         targeted
>MLS æå¹å                 True
>å¼·å¶ã¢ã¼ã               Enforcing
>ãã©ã°ã¤ã³å            catchall
>ãã¹ãå                  localhost.localdomain
>ãã©ãããã©ã¼ã       Linux localhost.localdomain
>                              2.6.25-0.121.rc5.git4.fc9 #1 SMP Fri Mar 14
>                              23:14:20 EDT 2008 i686 i686
>éç¥ã«ã¦ã³ã            7
>First Seen                    2008å¹´03æ17æ¥ 13æ57å38ç§
>Last Seen                     2008å¹´03æ18æ¥ 14æ08å41ç§
>Local ID                      1290a9f8-6cad-403a-aed6-c32bdac3cdf6
>è¡çªå·                     
>
>çã®ç£æ»ã¡ãã»ã¼ã¸   
>
>host=localhost.localdomain type=AVC msg=audit(1205813321.276:47): avc:  denied  { read } for  pid=3666 comm="tzdata-update" path="pipe:[53710]" dev=pipefs ino=53710 scontext=unconfined_u:unconfined_r:tzdata_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_notrans_t:s0-s0:c0.c1023 tclass=fifo_file
>
>host=localhost.localdomain type=SYSCALL msg=audit(1205813321.276:47): arch=40000003 syscall=11 success=yes exit=0 a0=80b615b a1=bfa0dca0 a2=bfa0dca4 a3=80b60f6 items=0 ppid=3556 pid=3666 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=2 comm="tzdata-update" exe="/usr/sbin/tzdata-update" subj=unconfined_u:unconfined_r:tzdata_t:s0-s0:c0.c1023 key=(null)
>
>

Actions: View

Attachments on bug 429813: 298331