Attachment 298620 Details for Bug 438281 – it's a copy of one alert, the trouble is about two alert the other was about "ioctl" until "getattr" and they flash at the same time

it's a copy of one alert, the trouble is about two alert the other was about "ioctl" until "getattr" and they flash at the same time

selinux_alert1.txt (text/plain), 2.50 KB, created by Robert on 2008-03-20 03:03:51 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Robert

Created: 2008-03-20 03:03:51 UTC

Size: 2.50 KB

patch

obsolete

>
>RÃ©sumÃ©:
>
>SELinux is preventing consoletype (consoletype_t) "ioctl" to pipe (initrc_t).
>
>Description dÃ©taillÃ©e:
>
>SELinux denied access requested by consoletype. It is not expected that this
>access is required by consoletype and this access may signal an intrusion
>attempt. It is also possible that the specific version or configuration of the
>application is causing it to require additional access.
>
>Autoriser l'accÃ¨s:
>
>Vous pouvez crÃ©er un module de politique locale pour autoriser cet accÃ¨s -
>lisez la FAQ (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Vous
>pouvez Ã©galement dÃ©sactiver la protection fournie par SELinux. DÃ©sactiver
>SELinux n'est pas recommandÃ©. Merci de remplir un rapport de bug
>(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) sur ce paquetage.
>
>Informations complÃ©mentaires:
>
>Contexte source               system_u:system_r:consoletype_t:s0
>Contexte cible                system_u:system_r:initrc_t:s0
>Objets du contexte            pipe [ fifo_file ]
>Source                        consoletype
>Source Path                   /sbin/consoletype
>Port                          <Inconnu>
>Host                          Acer5100
>Source RPM Packages           initscripts-8.60-1
>Target RPM Packages           
>Politique RPM                 selinux-policy-3.0.8-93.fc8
>Selinux activÃ©               True
>Type de politique             targeted
>MLS activÃ©                   True
>Mode strict                   Enforcing
>Nom du plugin                 catchall
>Nom de l'hÃ´te                Acer5100
>Plateforme                    Linux Acer5100 2.6.23.14-107.fc8 #1 SMP Mon Jan 14
>                              22:07:11 EST 2008 x86_64 x86_64
>Compteur d'alertes            255
>First Seen                    mer 19 mar 2008 21:41:36 EDT
>Last Seen                     mer 19 mar 2008 22:41:03 EDT
>Local ID                      19ee146e-155b-436a-9a9a-ab3a88a4aa11
>NumÃ©ros des lignes           
>
>Messages d'audit bruts        
>
>host=Acer5100 type=AVC msg=audit(1205980863.57:1133): avc:  denied  { ioctl } for  pid=16058 comm="consoletype" path="pipe:[264353]" dev=pipefs ino=264353 scontext=system_u:system_r:consoletype_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
>
>host=Acer5100 type=SYSCALL msg=audit(1205980863.57:1133): arch=c000003e syscall=16 success=no exit=-13 a0=0 a1=541c a2=7fffd35d227f a3=0 items=0 ppid=16057 pid=16058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="consoletype" exe="/sbin/consoletype" subj=system_u:system_r:consoletype_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 438281: 298620 | 298621