Attachment 302108 Details for Bug 442028 – SELinux error log

SELinux error log

selinux log (text/plain), 8.32 KB, created by Bryan Hepworth on 2008-04-11 12:15:36 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Bryan Hepworth

Created: 2008-04-11 12:15:36 UTC

Size: 8.32 KB

patch

obsolete

>Summary
>    SELinux is preventing sh (procmail_t) "getattr" to /bin/hostname
>    (hostname_exec_t).
>
>Detailed Description
>    SELinux denied access requested by sh. It is not expected that this access
>    is required by sh and this access may signal an intrusion attempt. It is
>    also possible that the specific version or configuration of the application
>    is causing it to require additional access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for /bin/hostname, restorecon -v
>    /bin/hostname If this does not work, there is currently no automatic way to
>    allow this access. Instead,  you can generate a local policy module to allow
>    this access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385
>    Or you can disable SELinux protection altogether. Disabling SELinux
>    protection is not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:procmail_t
>Target Context                system_u:object_r:hostname_exec_t
>Target Objects                /bin/hostname [ file ]
>Affected RPM Packages         net-tools-1.60-73 [target]
>Policy RPM                    selinux-policy-2.4.6-30.el5
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     smtp.coxagri.com
>Platform                      Linux smtp.coxagri.com 2.6.18-8.el5 #1 SMP Fri Jan
>                              26 14:15:21 EST 2007 i686 athlon
>Alert Count                   2
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { getattr } for comm="sh" dev=dm-0 egid=503 euid=503 exe="/bin/bash"
>exit=-13 fsgid=503 fsuid=503 gid=503 items=0 name="hostname"
>path="/bin/hostname" pid=29484 scontext=system_u:system_r:procmail_t:s0 sgid=503
>subj=system_u:system_r:procmail_t:s0 suid=503 tclass=file
>tcontext=system_u:object_r:hostname_exec_t:s0 tty=(none) uid=503
>
>Summary
>    SELinux is preventing /usr/bin/procmail (procmail_t) "execute" to hostname
>    (hostname_exec_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/bin/procmail. It is not expected
>    that this access is required by /usr/bin/procmail and this access may signal
>    an intrusion attempt. It is also possible that the specific version or
>    configuration of the application is causing it to require additional access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for hostname, restorecon -v hostname
>    If this does not work, there is currently no automatic way to allow this
>    access. Instead,  you can generate a local policy module to allow this
>    access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you
>    can disable SELinux protection altogether. Disabling SELinux protection is
>    not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:procmail_t
>Target Context                system_u:object_r:hostname_exec_t
>Target Objects                hostname [ file ]
>Affected RPM Packages         procmail-3.22-17.1 [application]
>Policy RPM                    selinux-policy-2.4.6-30.el5
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     smtp.coxagri.com
>Platform                      Linux smtp.coxagri.com 2.6.18-8.el5 #1 SMP Fri Jan
>                              26 14:15:21 EST 2007 i686 athlon
>Alert Count                   3
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { execute } for comm="procmail" dev=dm-0 egid=503 euid=503
>exe="/usr/bin/procmail" exit=-13 fsgid=503 fsuid=503 gid=503 items=0
>name="hostname" pid=29817 scontext=system_u:system_r:procmail_t:s0 sgid=503
>subj=system_u:system_r:procmail_t:s0 suid=503 tclass=file
>tcontext=system_u:object_r:hostname_exec_t:s0 tty=(none) uid=503
>
>
>Summary
>    SELinux is preventing /usr/bin/procmail (procmail_t) "execute" to hostname
>    (hostname_exec_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/bin/procmail. It is not expected
>    that this access is required by /usr/bin/procmail and this access may signal
>    an intrusion attempt. It is also possible that the specific version or
>    configuration of the application is causing it to require additional access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for hostname, restorecon -v hostname
>    If this does not work, there is currently no automatic way to allow this
>    access. Instead,  you can generate a local policy module to allow this
>    access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you
>    can disable SELinux protection altogether. Disabling SELinux protection is
>    not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information        
>
>Source Context                system_u:system_r:procmail_t
>Target Context                system_u:object_r:hostname_exec_t
>Target Objects                hostname [ file ]
>Affected RPM Packages         procmail-3.22-17.1 [application]
>Policy RPM                    selinux-policy-2.4.6-30.el5
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.catchall_file
>Host Name                     smtp.coxagri.com
>Platform                      Linux smtp.coxagri.com 2.6.18-8.el5 #1 SMP Fri Jan
>                              26 14:15:21 EST 2007 i686 athlon
>Alert Count                   3
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { execute } for comm="procmail" dev=dm-0 egid=503 euid=503
>exe="/usr/bin/procmail" exit=-13 fsgid=503 fsuid=503 gid=503 items=0
>name="hostname" pid=29817 scontext=system_u:system_r:procmail_t:s0 sgid=503
>subj=system_u:system_r:procmail_t:s0 suid=503 tclass=file
>tcontext=system_u:object_r:hostname_exec_t:s0 tty=(none) uid=503
>
>Summary
>    SELinux is preventing the /usr/bin/procmail from using potentially
>    mislabeled files (tmp).
>
>Detailed Description
>    SELinux has denied /usr/bin/procmail access to potentially mislabeled
>    file(s) (tmp).  This means that SELinux will not allow /usr/bin/procmail to
>    use these files.  It is common for users to edit files in their home
>    directory or tmp directories and then move (mv) them to system directories.
>    The problem is that the files end up with the wrong file context which
>    confined applications are not allowed to access.
>
>Allowing Access
>    If you want /usr/bin/procmail to access this files, you need to relabel them
>    using restorecon -v tmp.  You might want to relabel the entire directory
>    using restorecon -R -v .
>
>Additional Information        
>
>Source Context                system_u:system_r:procmail_t
>Target Context                system_u:object_r:tmp_t
>Target Objects                tmp [ dir ]
>Affected RPM Packages         procmail-3.22-17.1 [application]filesystem-2.4.0-1
>                              [target]
>Policy RPM                    selinux-policy-2.4.6-30.el5
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.home_tmp_bad_labels
>Host Name                     smtp.coxagri.com
>Platform                      Linux smtp.coxagri.com 2.6.18-8.el5 #1 SMP Fri Jan
>                              26 14:15:21 EST 2007 i686 athlon
>Alert Count                   3
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { search } for comm="procmail" dev=dm-0 egid=503 euid=503
>exe="/usr/bin/procmail" exit=-13 fsgid=503 fsuid=503 gid=503 items=0 name="tmp"
>pid=29791 scontext=system_u:system_r:procmail_t:s0 sgid=503
>subj=system_u:system_r:procmail_t:s0 suid=503 tclass=dir
>tcontext=system_u:object_r:tmp_t:s0 tty=(none) uid=503
>
>
>

Actions: View

Attachments on bug 442028: 302108