Attachment 300387 Details for Bug 440572 – selinux_alert.txt

selinux_alert.txt

selinux_alert.txt (text/plain), 4.71 KB, created by Jens Petersen on 2008-04-04 05:55:18 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jens Petersen

Created: 2008-04-04 05:55:18 UTC

Size: 4.71 KB

patch

obsolete

>
>è¦ç´:
>
>SELinux is preventing ldconfig (ldconfig_t) "read write" to socket
>(unconfined_t).
>
>è©³ç´°èª¬æ:
>
>SELinux denied access requested by ldconfig. It is not expected that this access
>is required by ldconfig and this access may signal an intrusion attempt. It is
>also possible that the specific version or configuration of the application is
>causing it to require additional access.
>
>ã¢ã¯ã»ã¹ãè¨±å¯:
>
>ãã¼ã«ã«ã®ããªã·ã¼ã¢ã¸ã¥ã¼ã«ãçæãã¦ãã®ã¢ã¯ã»ã¹ãè¨±å¯ãããã¨ã
>ã§ãã¾ãã FAQ (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385)
>ãåç§ãã¦ãã ããã ã¾ãã¯ã SELinux
>ä¿è·ããã¹ã¦ä¸ç·ã«ç¡å¹ã«ãããã¨ãã§ãã¾ãã SELinux
>ä¿è·ã®ç¡å¹åã¯æ¨å¥¨ããã¾ããã ãã®ããã±ã¼ã¸ã«é¢ãã¦
>ãã°ã¬ãã¼ã (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>ãæåºãã¦ãã ããã
>
>è¿½å æå ±:
>
>ã½ã¼ã¹ã³ã³ããã¹ã   unconfined_u:unconfined_r:ldconfig_t:s0-s0:c0.c102
>                              3
>ã¿ã¼ã²ããã³ã³ããã unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1
>                              023
>ã¿ã¼ã²ãããªãã¸ã§ã socket [ unix_stream_socket ]
>Source                        ldconfig
>Source Path                   /sbin/ldconfig
>Port                          <ä¸æ>
>Host                          dhcp-0-224.bne.redhat.com
>Source RPM Packages           glibc-2.7.90-13
>Target RPM Packages           
>ããªã·ã¼ RPM              selinux-policy-3.3.1-26.fc9
>Selinux æå¹å             True
>ããªã·ã¼ã¿ã¤ã         targeted
>MLS æå¹å                 True
>å¼·å¶ã¢ã¼ã               Enforcing
>ãã©ã°ã¤ã³å            catchall
>ãã¹ãå                  dhcp-0-224.bne.redhat.com
>ãã©ãããã©ã¼ã       Linux dhcp-0-224.bne.redhat.com
>                              2.6.25-0.185.rc7.git6.fc9.i686 #1 SMP Tue Apr 1
>                              13:48:40 EDT 2008 i686 i686
>éç¥ã«ã¦ã³ã            50
>First Seen                    2008å¹´03æ26æ¥ 13æ42å36ç§
>Last Seen                     2008å¹´04æ04æ¥ 15æ31å33ç§
>Local ID                      3a4f6f5b-9b9a-421f-8e5b-4faa5d61279f
>è¡çªå·                     
>
>çã®ç£æ»ã¡ãã»ã¼ã¸   
>
>host=dhcp-0-224.bne.redhat.com type=AVC msg=audit(1207287093.54:211): avc:  denied  { read write } for  pid=11135 comm="ldconfig" path="socket:[57171]" dev=sockfs ino=57171 scontext=unconfined_u:unconfined_r:ldconfig_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=unix_stream_socket
>
>host=dhcp-0-224.bne.redhat.com type=AVC msg=audit(1207287093.54:211): avc:  denied  { read write } for  pid=11135 comm="ldconfig" path="socket:[57185]" dev=sockfs ino=57185 scontext=unconfined_u:unconfined_r:ldconfig_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=unix_stream_socket
>
>host=dhcp-0-224.bne.redhat.com type=AVC msg=audit(1207287093.54:211): avc:  denied  { read } for  pid=11135 comm="ldconfig" path="/usr/share/chewing/us_freq.dat" dev=dm-0 ino=5267464 scontext=unconfined_u:unconfined_r:ldconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file
>
>host=dhcp-0-224.bne.redhat.com type=AVC msg=audit(1207287093.54:211): avc:  denied  { read } for  pid=11135 comm="ldconfig" path="/usr/share/chewing/dict.dat" dev=dm-0 ino=5267460 scontext=unconfined_u:unconfined_r:ldconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file
>
>host=dhcp-0-224.bne.redhat.com type=AVC msg=audit(1207287093.54:211): avc:  denied  { read } for  pid=11135 comm="ldconfig" path="/usr/share/scim-python/engine/PinYin/PinYin.py" dev=dm-0 ino=5251082 scontext=unconfined_u:unconfined_r:ldconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file
>
>host=dhcp-0-224.bne.redhat.com type=AVC msg=audit(1207287093.54:211): avc:  denied  { read } for  pid=11135 comm="ldconfig" path="/usr/share/scim-python/engine/PinYin/PYSQLiteDB.py" dev=dm-0 ino=5251080 scontext=unconfined_u:unconfined_r:ldconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file
>
>host=dhcp-0-224.bne.redhat.com type=AVC msg=audit(1207287093.54:211): avc:  denied  { read write } for  pid=11135 comm="ldconfig" path="socket:[57169]" dev=sockfs ino=57169 scontext=unconfined_u:unconfined_r:ldconfig_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=unix_stream_socket
>
>host=dhcp-0-224.bne.redhat.com type=SYSCALL msg=audit(1207287093.54:211): arch=40000003 syscall=11 success=yes exit=0 a0=9c9e960 a1=9c9e9e0 a2=9c9d9a8 a3=0 items=0 ppid=11134 pid=11135 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=12 comm="ldconfig" exe="/sbin/ldconfig" subj=unconfined_u:unconfined_r:ldconfig_t:s0-s0:c0.c1023 key=(null)
>
>

Actions: View

Attachments on bug 440572: 300387