Attachment 298723 Details for Bug 438384 – SElinux alert for this problem.

SElinux alert for this problem.

selinux_alert.txt (text/plain), 2.69 KB, created by Taylor Boatright on 2008-03-20 17:58:02 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Taylor Boatright

Created: 2008-03-20 17:58:02 UTC

Size: 2.69 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing tmpwatch (tmpreaper_t) "setattr" to ./alloc (usr_t).
>
>Detailed Description:
>
>SELinux denied access requested by tmpwatch. It is not expected that this access
>is required by tmpwatch and this access may signal an intrusion attempt. It is
>also possible that the specific version or configuration of the application is
>causing it to require additional access.
>
>Allowing Access:
>
>Sometimes labeling problems can cause SELinux denials. You could try to restore
>the default system file context for ./alloc,
>
>restorecon -v './alloc'
>
>If this does not work, there is currently no automatic way to allow this access.
>Instead, you can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:tmpreaper_t
>Target Context                system_u:object_r:usr_t
>Target Objects                ./alloc [ dir ]
>Source                        tmpwatch
>Source Path                   /usr/sbin/tmpwatch
>Port                          <Unknown>
>Host                          localhost.localdomain
>Source RPM Packages           tmpwatch-2.9.11-2
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.0.8-93.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall_file
>Host Name                     localhost.localdomain
>Platform                      Linux localhost.localdomain 2.6.24.3-34.fc8 #1 SMP
>                              Wed Mar 12 18:17:20 EDT 2008 i686 i686
>Alert Count                   3
>First Seen                    Tue 18 Mar 2008 01:44:20 PM EDT
>Last Seen                     Thu 20 Mar 2008 01:41:45 PM EDT
>Local ID                      fcdf9d65-9ca5-40ab-894a-8a0009f93512
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=localhost.localdomain type=AVC msg=audit(1206034905.786:28): avc:  denied  { setattr } for  pid=4926 comm="tmpwatch" name="alloc" dev=dm-0 ino=31785078 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir
>
>host=localhost.localdomain type=SYSCALL msg=audit(1206034905.786:28): arch=40000003 syscall=30 success=no exit=-13 a0=804ac72 a1=bff860e0 a2=0 a3=0 items=0 ppid=4924 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 438384: 298723