Attachment 298901 Details for Bug 438698 – setroubleshoot report

setroubleshoot report

selinux_alert.txt (text/plain), 2.73 KB, created by Martin Tack on 2008-03-24 16:06:50 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Martin Tack

Created: 2008-03-24 16:06:50 UTC

Size: 2.73 KB

patch

obsolete

>
>Samenvatting:
>
>SELinux is preventing sh (logrotate_t) "getattr" to /var/lock/subsys/cobblerd
>(var_lock_t).
>
>Gedetailleerde omschrijving:
>
>SELinux denied access requested by sh. It is not expected that this access is
>required by sh and this access may signal an intrusion attempt. It is also
>possible that the specific version or configuration of the application is
>causing it to require additional access.
>
>Allowing Access:
>
>Sometimes labeling problems can cause SELinux denials. You could try to restore
>the default system file context for /var/lock/subsys/cobblerd,
>
>restorecon -v '/var/lock/subsys/cobblerd'
>
>If this does not work, there is currently no automatic way to allow this access.
>Instead, you can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additionele informatie:
>
>Source Context                system_u:system_r:logrotate_t:s0
>Target Context                system_u:object_r:var_lock_t:s0
>Target Objects                /var/lock/subsys/cobblerd [ file ]
>Source                        sh
>Source Path                   /bin/bash
>Port                          <Onbekend>
>Host                          eerste.xbasis
>Source RPM Packages           bash-3.2-20.fc8
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.0.8-93.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall_file
>Hostnaam                      eerste.xbasis
>Platform                      Linux eerste.xbasis 2.6.24.3-34.fc8 #1 SMP Wed Mar
>                              12 16:51:49 EDT 2008 x86_64 x86_64
>Alert Count                   4
>First Seen                    zo 02 mrt 2008 17:38:48 CET
>Last Seen                     ma 24 mrt 2008 13:08:49 CET
>Local ID                      8fc02643-2e0e-46da-b0c6-e50e94fd5e8c
>Regelnummers                  
>
>Raw Audit Messages            
>
>host=eerste.xbasis type=AVC msg=audit(1206360529.412:78): avc:  denied  { getattr } for  pid=6119 comm="sh" path="/var/lock/subsys/cobblerd" dev=sdb5 ino=11567140 scontext=system_u:system_r:logrotate_t:s0 tcontext=system_u:object_r:var_lock_t:s0 tclass=file
>
>host=eerste.xbasis type=SYSCALL msg=audit(1206360529.412:78): arch=c000003e syscall=4 success=no exit=-13 a0=8c8e20 a1=7fff26828e20 a2=7fff26828e20 a3=8 items=0 ppid=6118 pid=6119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:logrotate_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 438698: 298901