Attachment 308553 Details for Bug 447048 – SELinux alert report for version 3.3.1-62.fc9

SELinux alert report for version 3.3.1-62.fc9

selinux_alert.txt (text/plain), 2.73 KB, created by Joachim Frieben on 2008-06-06 17:42:03 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Joachim Frieben

Created: 2008-06-06 17:42:03 UTC

Size: 2.73 KB

patch

obsolete

>Summary:
>
>SELinux is preventing the mrtg from using potentially mislabeled files (./root).
>
>Detailed Description:
>
>[SELinux is in permissive mode, the operation would have been denied but was
>permitted due to permissive mode.]
>
>SELinux has denied mrtg access to potentially mislabeled file(s) (./root). This
>means that SELinux will not allow mrtg to use these files. It is common for
>users to edit files in their home directory or tmp directories and then move
>(mv) them to system directories. The problem is that the files end up with the
>wrong file context which confined applications are not allowed to access.
>
>Allowing Access:
>
>If you want mrtg to access this files, you need to relabel them using restorecon
>-v './root'. You might want to relabel the entire directory using restorecon -R
>-v './root'.
>
>Additional Information:
>
>Source Context                system_u:system_r:mrtg_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:admin_home_t:s0
>Target Objects                ./root [ dir ]
>Source                        mrtg
>Source Path                   /usr/bin/perl
>Port                          <Unknown>
>Host                          fedora
>Source RPM Packages           perl-5.10.0-22.fc9
>Target RPM Packages           filesystem-2.4.13-1.fc9
>Policy RPM                    selinux-policy-3.3.1-62.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Permissive
>Plugin Name                   home_tmp_bad_labels
>Host Name                     fedora
>Platform                      Linux fedora 2.6.25.4-42.fc9.i686 #1 SMP Tue Jun
>                              3 19:04:34 EDT 2008 i686 i686
>Alert Count                   2
>First Seen                    Fri 06 Jun 2008 07:00:02 PM CEST
>Last Seen                     Fri 06 Jun 2008 07:25:01 PM CEST
>Local ID                      b5eaea5f-5fb7-4d3f-a881-9518f0b517ae
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=fedora type=AVC msg=audit(1212773101.839:72): avc:  denied  { search } for  pid=2887 comm="mrtg" name="root" dev=dm-0 ino=57345 scontext=system_u:system_r:mrtg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir
>
>host=fedora type=AVC msg=audit(1212773101.839:72): avc:  denied  { read } for  pid=2887 comm="mrtg" name="root" dev=dm-0 ino=57345 scontext=system_u:system_r:mrtg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir
>
>host=fedora type=SYSCALL msg=audit(1212773101.839:72): arch=40000003 syscall=5 success=yes exit=5 a0=113427 a1=8000 a2=0 a3=8000 items=0 ppid=2885 pid=2887 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="mrtg" exe="/usr/bin/perl" subj=system_u:system_r:mrtg_t:s0-s0:c0.c1023 key=(null)
>
>

Actions: View

Attachments on bug 447048: 308553 | 316095