Attachment 309539 Details for Bug 451720 – Diagnostics from 'setroubleshootd'.

Diagnostics from 'setroubleshootd'.

selinux-alert.txt (text/plain), 7.62 KB, created by August Schwerdfeger on 2008-06-16 21:17:08 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: August Schwerdfeger

Created: 2008-06-16 21:17:08 UTC

Size: 7.62 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing the NetworkManager from using potentially mislabeled files
>(/).
>
>Detailed Description:
>
>SELinux has denied NetworkManager access to potentially mislabeled file(s) (/).
>This means that SELinux will not allow NetworkManager to use these files. It is
>common for users to edit files in their home directory or tmp directories and
>then move (mv) them to system directories. The problem is that the files end up
>with the wrong file context which confined applications are not allowed to
>access.
>
>Allowing Access:
>
>If you want NetworkManager to access this files, you need to relabel them using
>restorecon -v '/'. You might want to relabel the entire directory using
>restorecon -R -v '/'.
>
>Additional Information:
>
>Source Context                system_u:system_r:NetworkManager_t:s0
>Target Context                system_u:object_r:tmp_t:s0
>Target Objects                / [ dir ]
>Source                        NetworkManager
>Source Path                   /usr/sbin/NetworkManager
>Port                          <Unknown>
>Host                          laptop04.tridev01
>Source RPM Packages           NetworkManager-0.7.0-0.9.4.svn3675.fc9
>Target RPM Packages           filesystem-2.4.13-1.fc9
>Policy RPM                    selinux-policy-3.3.1-64.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Permissive
>Plugin Name                   home_tmp_bad_labels
>Host Name                     laptop04.tridev01
>Platform                      Linux laptop04.tridev01 2.6.25.6-55.fc9.i686 #1
>                              SMP Tue Jun 10 16:27:49 EDT 2008 i686 i686
>Alert Count                   4
>First Seen                    Mon 16 Jun 2008 03:44:27 PM CDT
>Last Seen                     Mon 16 Jun 2008 03:54:02 PM CDT
>Local ID                      f35555d7-5700-43d5-9bea-f7febe12b62e
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=laptop04.tridev01 type=AVC msg=audit(1213649642.348:15): avc:  denied  { read } for  pid=2289 comm="NetworkManager" name="/" dev=tmpfs ino=6393 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>
>host=laptop04.tridev01 type=SYSCALL msg=audit(1213649642.348:15): arch=40000003 syscall=5 success=yes exit=9 a0=1e9e11 a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
>
>
>
>Summary:
>
>SELinux is preventing the NetworkManager from using potentially mislabeled files
>(/tmp).
>
>Detailed Description:
>
>SELinux has denied NetworkManager access to potentially mislabeled file(s)
>(/tmp). This means that SELinux will not allow NetworkManager to use these
>files. It is common for users to edit files in their home directory or tmp
>directories and then move (mv) them to system directories. The problem is that
>the files end up with the wrong file context which confined applications are not
>allowed to access.
>
>Allowing Access:
>
>If you want NetworkManager to access this files, you need to relabel them using
>restorecon -v '/tmp'. You might want to relabel the entire directory using
>restorecon -R -v '/tmp'.
>
>Additional Information:
>
>Source Context                system_u:system_r:NetworkManager_t:s0
>Target Context                system_u:object_r:tmp_t:s0
>Target Objects                /tmp [ dir ]
>Source                        NetworkManager
>Source Path                   /usr/sbin/NetworkManager
>Port                          <Unknown>
>Host                          laptop04.tridev01
>Source RPM Packages           NetworkManager-0.7.0-0.9.4.svn3675.fc9
>Target RPM Packages           filesystem-2.4.13-1.fc9
>Policy RPM                    selinux-policy-3.3.1-64.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Permissive
>Plugin Name                   home_tmp_bad_labels
>Host Name                     laptop04.tridev01
>Platform                      Linux laptop04.tridev01 2.6.25.6-55.fc9.i686 #1
>                              SMP Tue Jun 10 16:27:49 EDT 2008 i686 i686
>Alert Count                   7
>First Seen                    Mon 16 Jun 2008 10:02:28 AM CDT
>Last Seen                     Mon 16 Jun 2008 03:54:02 PM CDT
>Local ID                      a3f69a46-d035-408f-bbc6-55708e108de6
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=laptop04.tridev01 type=AVC msg=audit(1213649642.348:14): avc:  denied  { getattr } for  pid=2289 comm="NetworkManager" path="/tmp" dev=tmpfs ino=6393 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>
>host=laptop04.tridev01 type=SYSCALL msg=audit(1213649642.348:14): arch=40000003 syscall=195 success=yes exit=0 a0=1e9e11 a1=bfd7a314 a2=c0eff4 a3=bfd7a3b0 items=0 ppid=1 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
>
>
>
>Summary:
>
>SELinux is preventing NetworkManager (NetworkManager_t) "setsched" to <Unknown>
>(NetworkManager_t).
>
>Detailed Description:
>
>SELinux denied access requested by NetworkManager. It is not expected that this
>access is required by NetworkManager and this access may signal an intrusion
>attempt. It is also possible that the specific version or configuration of the
>application is causing it to require additional access.
>
>Allowing Access:
>
>You can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:NetworkManager_t:s0
>Target Context                system_u:system_r:NetworkManager_t:s0
>Target Objects                None [ process ]
>Source                        NetworkManager
>Source Path                   /usr/sbin/NetworkManager
>Port                          <Unknown>
>Host                          laptop04.tridev01
>Source RPM Packages           NetworkManager-0.7.0-0.9.4.svn3675.fc9
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.3.1-64.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Permissive
>Plugin Name                   catchall
>Host Name                     laptop04.tridev01
>Platform                      Linux laptop04.tridev01 2.6.25.6-55.fc9.i686 #1
>                              SMP Tue Jun 10 16:27:49 EDT 2008 i686 i686
>Alert Count                   7
>First Seen                    Mon 16 Jun 2008 10:02:28 AM CDT
>Last Seen                     Mon 16 Jun 2008 03:54:02 PM CDT
>Local ID                      6e05e8c9-6363-4d2e-9f44-dbf56dedcb21
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=laptop04.tridev01 type=AVC msg=audit(1213649642.343:13): avc:  denied  { setsched } for  pid=2289 comm="NetworkManager" scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=process
>
>host=laptop04.tridev01 type=SYSCALL msg=audit(1213649642.343:13): arch=40000003 syscall=156 success=yes exit=0 a0=8f1 a1=0 a2=bfd7e794 a3=b8069710 items=0 ppid=1 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 451720: 309539