Attachment 309951 Details for Bug 452320 – output from setroubleshoot

output from setroubleshoot

selinux_alert.txt (text/plain), 2.76 KB, created by Craig Goodyear on 2008-06-20 21:49:29 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Craig Goodyear

Created: 2008-06-20 21:49:29 UTC

Size: 2.76 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing amindexd (amanda_t) "write" to ./_etc (amanda_config_t).
>
>Detailed Description:
>
>SELinux denied access requested by amindexd. It is not expected that this access
>is required by amindexd and this access may signal an intrusion attempt. It is
>also possible that the specific version or configuration of the application is
>causing it to require additional access.
>
>Allowing Access:
>
>Sometimes labeling problems can cause SELinux denials. You could try to restore
>the default system file context for ./_etc,
>
>restorecon -v './_etc'
>
>If this does not work, there is currently no automatic way to allow this access.
>Instead, you can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:amanda_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:amanda_config_t:s0
>Target Objects                ./_etc [ dir ]
>Source                        amindexd
>Source Path                   /usr/lib/amanda/amindexd
>Port                          <Unknown>
>Host                          cm.localdomain
>Source RPM Packages           amanda-server-2.5.2p1-10.fc9
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.3.1-64.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall_file
>Host Name                     cm.localdomain
>Platform                      Linux cm.localdomain 2.6.25.6-55.fc9.i686 #1 SMP
>                              Tue Jun 10 16:27:49 EDT 2008 i686 athlon
>Alert Count                   1
>First Seen                    Fri 20 Jun 2008 04:03:53 PM CDT
>Last Seen                     Fri 20 Jun 2008 04:07:18 PM CDT
>Local ID                      2c6af00a-a374-49ab-99d7-330b666339c7
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=cm.localdomain type=AVC msg=audit(1213996038.792:171): avc:  denied  { write } for  pid=3818 comm="amindexd" name="_etc" dev=dm-0 ino=950453 scontext=system_u:system_r:amanda_t:s0-s0:c0.c1023 tcontext=system_u:object_r:amanda_config_t:s0 tclass=dir
>
>host=cm.localdomain type=SYSCALL msg=audit(1213996038.792:171): arch=40000003 syscall=5 success=no exit=-13 a0=b8521488 a1=8041 a2=180 a3=8041 items=0 ppid=3817 pid=3818 auid=4294967295 uid=33 gid=6 euid=33 suid=33 fsuid=33 egid=6 sgid=6 fsgid=6 tty=(none) ses=4294967295 comm="amindexd" exe="/usr/lib/amanda/amindexd" subj=system_u:system_r:amanda_t:s0-s0:c0.c1023 key=(null)
>
>

Actions: View

Attachments on bug 452320: 309951 | 311059