Attachment 303919 Details for Bug 444353 – setroubleshoot browser warning

setroubleshoot browser warning

selinux_alert-policy.txt (text/plain), 2.58 KB, created by Need Real Name on 2008-04-27 17:01:24 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Need Real Name

Created: 2008-04-27 17:01:24 UTC

Size: 2.58 KB

patch

obsolete

>
>Summary:
>
>SELinux prevented setfiles from using the terminal 0.
>
>Detailed Description:
>
>[SELinux is in permissive mode, the operation would have been denied but was
>permitted due to permissive mode.]
>
>SELinux prevented setfiles from using the terminal 0. In most cases daemons do
>not need to interact with the terminal, usually these avc messages can be
>ignored. All of the confined daemons should have dontaudit rules around using
>the terminal. Please file a bug report
>(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this selinux-policy.
>If you would like to allow all daemons to interact with the terminal, you can
>turn on the allow_daemons_use_tty boolean.
>
>Allowing Access:
>
>Changing the "allow_daemons_use_tty" boolean to true will allow this access:
>"setsebool -P allow_daemons_use_tty=1."
>
>The following command will allow this access:
>
>setsebool -P allow_daemons_use_tty=1
>
>Additional Information:
>
>Source Context                root:system_r:setfiles_t:SystemLow-SystemHigh
>Target Context                root:object_r:devpts_t
>Target Objects                0 [ chr_file ]
>Source                        setfiles
>Source Path                   /sbin/setfiles
>Port                          <Unknown>
>Host                          fourier
>Source RPM Packages           policycoreutils-2.0.33-3.fc8
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.0.8-95.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Permissive
>Plugin Name                   allow_daemons_use_tty
>Host Name                     fourier
>Platform                      Linux fourier 2.6.23.15-80.fc7 #1 SMP Sun Feb 10
>                              17:29:10 EST 2008 i686 athlon
>Alert Count                   6
>First Seen                    Wed 23 Apr 2008 03:59:02 AM EDT
>Last Seen                     Wed 23 Apr 2008 05:15:38 AM EDT
>Local ID                      93634cb9-f206-410d-b142-a0efc90fbbcb
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=fourier type=AVC msg=audit(1208942138.714:605): avc:  denied  { read write } for  pid=5405 comm="setfiles" name="0" dev=devpts ino=2 scontext=root:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=root:object_r:devpts_t:s0 tclass=chr_file
>
>host=fourier type=SYSCALL msg=audit(1208942138.714:605): arch=40000003 syscall=11 success=yes exit=0 a0=8930cb8 a1=d36b4d0 a2=0 a3=0 items=0 ppid=5402 pid=5405 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="setfiles" exe="/sbin/setfiles" subj=root:system_r:setfiles_t:s0-s0:c0.c1023 key=(null)
>
>

Actions: View

Attachments on bug 444353: 303919