Attachment 305733 Details for Bug 446972 – First warning

First warning

selinux_alert.txt (text/plain), 3.02 KB, created by Pedro Silva on 2008-05-16 19:41:59 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Pedro Silva

Created: 2008-05-16 19:41:59 UTC

Size: 3.02 KB

patch

obsolete

>
>Resumo:
>
>SELinux is preventing restorecon (setfiles_t) "read" to pipe
>(unconfined_notrans_t).
>
>DescriÃ§Ã£o Detalhada:
>
>SELinux denied access requested by restorecon. It is not expected that this
>access is required by restorecon and this access may signal an intrusion
>attempt. It is also possible that the specific version or configuration of the
>application is causing it to require additional access.
>
>Permitir o Acesso:
>
>PoderÃ¡ gerar um mÃ³dulo local da polÃtica para permitir este acesso - veja a
>FAQ (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) PoderÃ¡ tambÃ©m
>desactivar a protecÃ§Ã£o do SELinux em conjunto. A desactivaÃ§Ã£o da protecÃ§Ã£o
>do SELinux nÃ£o Ã© recomendada. Envie por favor um relatÃ³rio de erros
>(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) sobre este pacote.
>
>InformaÃ§Ã£o Adicional:
>
>Contexto de Origem            unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c102
>                              3
>Contexto de Destino           unconfined_u:unconfined_r:unconfined_notrans_t:s0-
>                              s0:c0.c1023
>Objectos de Destino           pipe [ fifo_file ]
>Source                        restorecon
>Source Path                   /sbin/setfiles
>Port                          <Desconhecida>
>Host                          localhost.localdomain
>Source RPM Packages           policycoreutils-2.0.46-5.fc9
>Target RPM Packages           
>RPM da PolÃtica              selinux-policy-3.3.1-42.fc9
>SELinux Activo                True
>Tipo de PolÃtica             targeted
>MLS Activo                    True
>Modo ObrigatÃ³rio             Enforcing
>Nome do 'Plugin'              catchall
>Nome da MÃ¡quina              localhost.localdomain
>Plataforma                    Linux localhost.localdomain 2.6.25.3-18.fc9.i686
>                              #1 SMP Tue May 13 05:38:53 EDT 2008 i686 i686
>NÃºmero de Alertas            4
>First Seen                    Sex 16 Mai 2008 18:52:40 WEST
>Last Seen                     Sex 16 Mai 2008 19:47:17 WEST
>Local ID                      eaa84709-0710-4661-9cc9-68930be4c357
>NÃºmeros de Linha             
>
>Mensagens de Auditoria em Bru 
>
>host=localhost.localdomain type=AVC msg=audit(1210963637.181:58): avc:  denied  { read } for  pid=13897 comm="restorecon" path="pipe:[181004]" dev=pipefs ino=181004 scontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_notrans_t:s0-s0:c0.c1023 tclass=fifo_file
>
>host=localhost.localdomain type=AVC msg=audit(1210963637.181:58): avc:  denied  { write } for  pid=13897 comm="restorecon" path="/dev/null" dev=loop0 ino=122883 scontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=chr_file
>
>host=localhost.localdomain type=SYSCALL msg=audit(1210963637.181:58): arch=40000003 syscall=11 success=yes exit=0 a0=97da228 a1=97d74e8 a2=97d7770 a3=0 items=0 ppid=13895 pid=13897 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=1 comm="restorecon" exe="/sbin/setfiles" subj=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 key=(null)
>
>

Actions: View

Attachments on bug 446972: 305733 | 305735