Attachment 299578 Details for Bug 439599 – SELinux log and more

SELinux log and more

nice.systemmonitor.txt (text/plain), 3.24 KB, created by Flóki Pálsson on 2008-03-29 14:26:07 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Flóki Pálsson

Created: 2008-03-29 14:26:07 UTC

Size: 3.24 KB

patch

obsolete

>System Monitor 2.22.0
>gnome-system-monitor-2.22.0-1.fc9.x86_64
>
>=============
>in windeow aftertraying to caange nice value in system monitor
>
>'Cannot change the priority of process with pid 2447 to -3: Permission denied'
>
>====================
>In terminla change nice value 
>
>[root@localhost ~]# renice -5 2447
>2447: old priority 0, new priority -5
>[root@localhost ~]#
>
>[root@localhost ~]# restorecon -R -v '/home/floki'
>restorecon reset /home/floki/.lyrics context unconfined_u:object_r:user_home_dir_t:s0->system_u:object_r:user_home_t:s0
>restorecon reset /home/floki/.lyrics/áá£á± context unconfined_u:object_r:user_home_dir_t:s0->system_u:object_r:user_home_t:s0
>You have new mail in /var/spool/mail/root
>[root@localhost ~]# gedit /var/spool/mail/root
>
>===============================================================
>Log form SElinx after change in Nice value 
>
>SELinux is preventing the semodule from using potentially mislabeled files (/home/floki/.xsession-errors). Detailed Description[SELinux is in permissive mode, the operation would have been denied but was permitted due to permissive mode.]SELinux has denied semodule access to potentially mislabeled file(s) (/home/floki/.xsession-errors). This means that SELinux will not allow semodule to use these files. It is common for users to edit files in their home directory or tmp directories and then move (mv) them to system directories. The problem is that the files end up with the wrong file context which confined applications are not allowed to access. Allowing AccessIf you want semodule to access this files, you need to relabel them using restorecon -v '/home/floki/.xsession-errors'. You might want to relabel the entire directory using restorecon -R -v '/home/floki'. Additional InformationSource Context:Â Â unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023Target Context:Â Â system_u:object_r:user_home_t:s0Target Objects:Â Â /home/floki/.xsession-errors [ file ]Source:Â Â semoduleSource Path:Â Â /usr/sbin/semodulePort:Â Â <Unknown>Host:Â Â localhost.localdomainSource RPM Packages:Â Â policycoreutils-2.0.46-2.fc9Target RPM Packages:Â Â Policy RPM:Â Â selinux-policy-3.3.1-24.fc9Selinux Enabled:Â Â TruePolicy Type:Â Â targetedMLS Enabled:Â Â TrueEnforcing Mode:Â Â PermissivePlugin Name:Â Â home_tmp_bad_labelsHost Name:Â Â localhost.localdomainPlatform:Â Â Linux localhost.localdomain 2.6.25-0.163.rc7.git1.fc9.x86_64 #1 SMP Thu Mar 27 09:29:41 EDT 2008 x86_64 x86_64Alert Count:Â Â 6First Seen:Â Â fÃ¶s 28.mar 2008, 20:43:00 GMTLast Seen:Â Â lau 29.mar 2008, 13:59:53 GMTLocal ID:Â Â e4111568-ed4b-4873-999a-d643229799aaLine Numbers:Â Â Raw Audit Messages :host=localhost.localdomain type=AVC msg=audit(1206799193.281:55): avc: denied { append } for pid=8593 comm="semodule" path="/home/floki/.xsession-errors" dev=dm-0 ino=7045135 scontext=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file host=localhost.localdomain type=SYSCALL msg=audit(1206799193.281:55): arch=c000003e syscall=59 success=yes exit=0 a0=1247490 a1=1247830 a2=1246660 a3=3c01d6da10 items=0 ppid=8590 pid=8593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="semodule" exe="/usr/sbin/semodule" subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 key=(null) 
>

Actions: View

Attachments on bug 439599: 299578