Attachment 305880 Details for Bug 447223 – selinux alert details

selinux alert details

selinux_alert4.txt (text/plain), 2.94 KB, created by lanx on 2008-05-18 22:18:10 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: lanx

Created: 2008-05-18 22:18:10 UTC

Size: 2.94 KB

patch

obsolete

>
>Podsumowanie:
>
>SELinux is preventing wpa_supplicant (NetworkManager_t) "setattr" to
>./wpa_supplicant (var_run_t).
>
>SzczegÃ³Åowy opis:
>
>[SELinux is in permissive mode, the operation would have been denied but was
>permitted due to permissive mode.]
>
>SELinux denied access requested by wpa_supplicant. It is not expected that this
>access is required by wpa_supplicant and this access may signal an intrusion
>attempt. It is also possible that the specific version or configuration of the
>application is causing it to require additional access.
>
>Zezwalanie na dostÄp:
>
>Sometimes labeling problems can cause SELinux denials. You could try to restore
>the default system file context for ./wpa_supplicant,
>
>restorecon -v './wpa_supplicant'
>
>If this does not work, there is currently no automatic way to allow this access.
>Instead, you can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Dodatkowe informacje:
>
>Kontekst ÅºrÃ³dÅowy          system_u:system_r:NetworkManager_t:s0
>Kontekst docelowy             system_u:object_r:var_run_t:s0
>Obiekty docelowe              ./wpa_supplicant [ dir ]
>Å¹rÃ³dÅo                     wpa_supplicant
>Source Path                   /usr/sbin/wpa_supplicant
>Port                          <Nieznane>
>Komputer                      localhost.localdomain
>Å¹rÃ³dÅowe pakiety RPM       wpa_supplicant-0.5.10-4.fc8
>Docelowe pakiety RPM          
>RPM polityki                  selinux-policy-3.0.8-101.fc8
>SELinux jest wÅÄczony       True
>Typ polityki                  targeted
>MLS jest wÅÄczone           True
>Tryb wymuszania               Permissive
>Nazwa wtyczki                 catchall_file
>Nazwa komputera               localhost.localdomain
>Platforma                     Linux localhost.localdomain 2.6.24.7-92.fc8 #1 SMP
>                              Wed May 7 16:50:09 EDT 2008 i686 i686
>Licznik alarmÃ³w              2
>Po raz pierwszy               nie, 18 maj 2008, 21:25:14
>Po raz ostatni                pon, 19 maj 2008, 00:07:36
>Lokalny ID                    15900b8c-3a32-4d1b-b1e1-34869bb273ac
>Liczba wierszy                
>
>Surowe komunikaty audytu      
>
>host=localhost.localdomain type=AVC msg=audit(1211148456.126:61): avc:  denied  { setattr } for  pid=12187 comm="wpa_supplicant" name="wpa_supplicant" dev=sda1 ino=2326530 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir
>
>host=localhost.localdomain type=SYSCALL msg=audit(1211148456.126:61): arch=40000003 syscall=212 success=yes exit=0 a0=95582f0 a1=ffffffff a2=a a3=954ce80 items=0 ppid=12186 pid=12187 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="wpa_supplicant" exe="/usr/sbin/wpa_supplicant" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 447223: 305880