Attachment 308441 Details for Bug 450117 – AVC denial with unclear path

AVC denial with unclear path

selinux_alert.txt (text/plain), 2.68 KB, created by Casey Dahlin on 2008-06-05 14:08:39 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Casey Dahlin

Created: 2008-06-05 14:08:39 UTC

Size: 2.68 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing the NetworkManager (NetworkManager_t) from executing
>./nscd.
>
>Detailed Description:
>
>SELinux has denied the NetworkManager from executing ./nscd. If NetworkManager
>is supposed to be able to execute ./nscd, this could be a labeling problem. Most
>confined domains are allowed to execute files labeled bin_t. So you could change
>the labeling on this file to bin_t and retry the application. If this
>NetworkManager is not supposed to execute ./nscd, this could signal a intrusion
>attempt.
>
>Allowing Access:
>
>If you want to allow NetworkManager to execute ./nscd: chcon -t bin_t './nscd'
>If this fix works, please update the file context on disk, with the following
>command: semanage fcontext -a -t bin_t './nscd' Please specify the full path to
>the executable, Please file a bug report
>(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this selinux-policy
>to make sure this becomes the default labeling.
>
>Additional Information:
>
>Source Context                system_u:system_r:NetworkManager_t:s0
>Target Context                system_u:object_r:etc_t:s0
>Target Objects                ./nscd [ file ]
>Source                        NetworkManager
>Source Path                   /usr/sbin/NetworkManager
>Port                          <Unknown>
>Host                          4chan
>Source RPM Packages           NetworkManager-0.7.0-0.9.3.svn3623.fc9
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.3.1-62.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   execute
>Host Name                     4chan
>Platform                      Linux 4chan 2.6.25.3-18.fc9.x86_64 #1 SMP Tue May
>                              13 04:54:47 EDT 2008 x86_64 x86_64
>Alert Count                   2
>First Seen                    Thu 05 Jun 2008 09:40:16 AM EDT
>Last Seen                     Thu 05 Jun 2008 09:40:26 AM EDT
>Local ID                      e8f90fd9-4b98-4920-92ff-837a8b0c1c0a
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=4chan type=AVC msg=audit(1212673226.750:655): avc:  denied  { execute } for  pid=15507 comm="NetworkManager" name="nscd" dev=dm-0 ino=2630751 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>
>host=4chan type=SYSCALL msg=audit(1212673226.750:655): arch=c000003e syscall=59 success=no exit=-13 a0=6efea0 a1=6efe60 a2=7fff98388080 a3=0 items=0 ppid=2069 pid=15507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 450117: 308441