Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 308402 Details for
Bug 450055
Selinux alert on unmount
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
selinux alert
unmount_selinux_alert.txt (text/plain), 2.54 KB, created by
Valent Turkovic
on 2008-06-04 23:41:30 UTC
(
hide
)
Description:
selinux alert
Filename:
MIME Type:
Creator:
Valent Turkovic
Created:
2008-06-04 23:41:30 UTC
Size:
2.54 KB
patch
obsolete
> >Summary: > >SELinux prevented umount from mounting on the file or directory >"/media/.hal-mtab-lock" (type "mnt_t"). > >Detailed Description: > >SELinux prevented umount from mounting a filesystem on the file or directory >"/media/.hal-mtab-lock" of type "mnt_t". By default SELinux limits the mounting >of filesystems to only some files or directories (those with types that have the >mountpoint attribute). The type "mnt_t" does not have this attribute. You can >either relabel the file or directory or set the boolean "allow_mount_anyfile" to >true to allow mounting on any file or directory. > >Allowing Access: > >Changing the "allow_mount_anyfile" boolean to true will allow this access: >"setsebool -P allow_mount_anyfile=1." > >Fix Command: > >setsebool -P allow_mount_anyfile=1 > >Additional Information: > >Source Context system_u:system_r:mount_t:s0 >Target Context system_u:object_r:mnt_t:s0 >Target Objects /media/.hal-mtab-lock [ file ] >Source umount >Source Path /bin/umount >Port <Unknown> >Host localhost.localdomain >Source RPM Packages util-linux-ng-2.13.1-6.fc9 >Target RPM Packages >Policy RPM selinux-policy-3.3.1-55.fc9 >Selinux Enabled True >Policy Type targeted >MLS Enabled True >Enforcing Mode Enforcing >Plugin Name allow_mount_anyfile >Host Name localhost.localdomain >Platform Linux localhost.localdomain 2.6.25.3-18.fc9.i686 > #1 SMP Tue May 13 05:38:53 EDT 2008 i686 i686 >Alert Count 1 >First Seen Thu 05 Jun 2008 01:32:57 AM CEST >Last Seen Thu 05 Jun 2008 01:32:57 AM CEST >Local ID 084aba88-4df8-445e-b505-e82b2534ac94 >Line Numbers > >Raw Audit Messages > >host=localhost.localdomain type=AVC msg=audit(1212622377.24:25): avc: denied { read write } for pid=4816 comm="umount" path="/media/.hal-mtab-lock" dev=dm-1 ino=58392 scontext=system_u:system_r:mount_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=file > >host=localhost.localdomain type=SYSCALL msg=audit(1212622377.24:25): arch=40000003 syscall=11 success=yes exit=0 a0=804b14d a1=bf844530 a2=bf844aac a3=804b14d items=0 ppid=4815 pid=4816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="umount" exe="/bin/umount" subj=system_u:system_r:mount_t:s0 key=(null) > >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 450055
: 308402 |
309044