Attachment 299599 Details for Bug 439589 – system-config-keyboard - and SElinux

system-config-keyboard - and SElinux

fc9bcfusis.txt (text/plain), 4.48 KB, created by Flóki Pálsson on 2008-03-29 23:28:57 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Flóki Pálsson

Created: 2008-03-29 23:28:57 UTC

Size: 4.48 KB

patch

obsolete

>[root@localhost ~]# system-config-keyboard
>Loading /lib/kbd/keymaps/i386/qwerty/is-latin1.map.gz
>Traceback (most recent call last):
>  File "/usr/share/system-config-keyboard/keyboard_gui.py", line 226, in _okClicked
>    return self.apply(None, False)
>  File "/usr/share/system-config-keyboard/keyboard_gui.py", line 117, in apply
>    keyboardBackend.modifyXconfig(fullname, layout, model, variant, options)
>  File "/usr/share/system-config-keyboard/keyboard_backend.py", line 34, in modifyXconfig
>    keyboard = xf86config.getCoreKeyboard(xconfig)
>  File "/usr/lib64/python2.5/site-packages/xf86config.py", line 177, in getCoreKeyboard
>    raise XF86SectionMissing("No CoreKeyboard InputDevice found in the layout")
>xf86config.XF86SectionMissing
>Loading /lib/kbd/keymaps/i386/qwerty/is-latin1.map.gz
>Traceback (most recent call last):
>  File "/usr/share/system-config-keyboard/keyboard_gui.py", line 226, in _okClicked
>    return self.apply(None, False)
>  File "/usr/share/system-config-keyboard/keyboard_gui.py", line 117, in apply
>    keyboardBackend.modifyXconfig(fullname, layout, model, variant, options)
>  File "/usr/share/system-config-keyboard/keyboard_backend.py", line 34, in modifyXconfig
>    keyboard = xf86config.getCoreKeyboard(xconfig)
>  File "/usr/lib64/python2.5/site-packages/xf86config.py", line 177, in getCoreKeyboard
>    raise XF86SectionMissing("No CoreKeyboard InputDevice found in the layout")
>xf86config.XF86SectionMissing
>[root@localhost ~]# system-config-keyboard
>Loading /lib/kbd/keymaps/i386/qwerty/is-latin1.map.gz
>Traceback (most recent call last):
>  File "/usr/share/system-config-keyboard/keyboard_gui.py", line 226, in _okClicked
>    return self.apply(None, False)
>  File "/usr/share/system-config-keyboard/keyboard_gui.py", line 117, in apply
>    keyboardBackend.modifyXconfig(fullname, layout, model, variant, options)
>  File "/usr/share/system-config-keyboard/keyboard_backend.py", line 34, in modifyXconfig
>    keyboard = xf86config.getCoreKeyboard(xconfig)
>  File "/usr/lib64/python2.5/site-packages/xf86config.py", line 177, in getCoreKeyboard
>    raise XF86SectionMissing("No CoreKeyboard InputDevice found in the layout")
>xf86config.XF86SectionMissing
>
>
>
>----------------------------------------------------
>Log form SElinux
>SummarySELinux is preventing the loadkeys from using potentially mislabeled files (./root). Detailed Description[SELinux is in permissive mode, the operation would have been denied but was permitted due to permissive mode.]SELinux has denied loadkeys access to potentially mislabeled file(s) (./root). This means that SELinux will not allow loadkeys to use these files. It is common for users to edit files in their home directory or tmp directories and then move (mv) them to system directories. The problem is that the files end up with the wrong file context which confined applications are not allowed to access. Allowing AccessIf you want loadkeys to access this files, you need to relabel them using restorecon -v './root'. You might want to relabel the entire directory using restorecon -R -v './root'. Additional InformationSource Context:Â Â unconfined_u:unconfined_r:loadkeys_t:s0-s0:c0.c1023Target Context:Â Â system_u:object_r:admin_home_t:s0Target Objects:Â Â ./root [ dir ]Source:Â Â loadkeysSource Path:Â Â /bin/loadkeysPort:Â Â <Unknown>Host:Â Â localhost.localdomainSource RPM Packages:Â Â kbd-1.12-31.fc9Target RPM Packages:Â Â filesystem-2.4.11-2.fc9Policy RPM:Â Â selinux-policy-3.3.1-24.fc9Selinux Enabled:Â Â TruePolicy Type:Â Â targetedMLS Enabled:Â Â TrueEnforcing Mode:Â Â PermissivePlugin Name:Â Â home_tmp_bad_labelsHost Name:Â Â localhost.localdomainPlatform:Â Â Linux localhost.localdomain 2.6.25-0.161.rc7.fc9.x86_64 #1 SMP Wed Mar 26 17:04:02 EDT 2008 x86_64 x86_64Alert Count:Â Â 9First Seen:Â Â Sat 29 Mar 2008 08:32:42 PM GMTLast Seen:Â Â Sat 29 Mar 2008 11:21:24 PM GMTLocal ID:Â Â 310b61e2-8a7c-402d-b9e3-66e4599b3465Line Numbers:Â Â Raw Audit Messages :host=localhost.localdomain type=AVC msg=audit(1206832884.862:114): avc: denied { read } for pid=3989 comm="loadkeys" name="root" dev=dm-0 ino=1835009 scontext=unconfined_u:unconfined_r:loadkeys_t:s0-s0:c0.c1023 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir host=localhost.localdomain type=SYSCALL msg=audit(1206832884.862:114): arch=c000003e syscall=2 success=yes exit=3 a0=40e2bb a1=90800 a2=1 a3=3434d6da10 items=0 ppid=3988 pid=3989 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=2 comm="loadkeys" exe="/bin/loadkeys" subj=unconfined_u:unconfined_r:loadkeys_t:s0-s0:c0.c1023 key=(null)

Actions: View

Attachments on bug 439589: 299568 | 299599