Attachment 310572 Details for Bug 453391 – The actual access denial report

The actual access denial report

selinux_alert.txt (text/plain), 2.56 KB, created by Volans on 2008-06-30 10:51:55 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Volans

Created: 2008-06-30 10:51:55 UTC

Size: 2.56 KB

patch

obsolete

>
>Zusammenfassung:
>
>SELinux is preventing the ntpd from using potentially mislabeled files
>(/home/Volans/.xsession-errors).
>
>Detaillierte Beschreibung:
>
>SELinux has denied ntpd access to potentially mislabeled file(s)
>(/home/Volans/.xsession-errors). This means that SELinux will not allow ntpd to
>use these files. It is common for users to edit files in their home directory or
>tmp directories and then move (mv) them to system directories. The problem is
>that the files end up with the wrong file context which confined applications
>are not allowed to access.
>
>Zugriff erlauben:
>
>If you want ntpd to access this files, you need to relabel them using restorecon
>-v '/home/Volans/.xsession-errors'. You might want to relabel the entire
>directory using restorecon -R -v '/home/Volans'.
>
>ZusÃ¤tzliche Informationen:
>
>Quellkontext                  unconfined_u:system_r:ntpd_t:s0
>Zielkontext                   system_u:object_r:user_home_t:s0
>Zielobjekte                   /home/Volans/.xsession-errors [ file ]
>Source                        ntpd
>Source Path                   /usr/sbin/ntpd
>Port                          <Unbekannt>
>Host                          localhost.localdomain
>Source RPM Packages           ntp-4.2.4p4-6.fc9
>Target RPM Packages           
>RPM-Richtlinie                selinux-policy-3.3.1-69.fc9
>SELinux aktiviert             True
>Richtlinienversion            targeted
>MLS aktiviert                 True
>Enforcing-Modus               Enforcing
>Plugin-Name                   home_tmp_bad_labels
>Hostname                      localhost.localdomain
>Plattform                     Linux localhost.localdomain 2.6.25.6-55.fc9.i686
>                              #1 SMP Tue Jun 10 16:27:49 EDT 2008 i686 i686
>Anzahl der Alarme             3
>Zuerst gesehen                Mo 30 Jun 2008 11:32:40 WEST
>Zuletzt gesehen               Mo 30 Jun 2008 11:38:46 WEST
>Lokale ID                     fa5a4789-7b9b-46de-b547-a44d5918faa2
>Zeilennummern                 
>
>Raw-Audit-Meldungen           
>
>host=localhost.localdomain type=AVC msg=audit(1214822326.528:51): avc:  denied  { read append } for  pid=3978 comm="ntpd" path="/home/Volans/.xsession-errors" dev=sda1 ino=2154531 scontext=unconfined_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>
>host=localhost.localdomain type=SYSCALL msg=audit(1214822326.528:51): arch=40000003 syscall=11 success=yes exit=0 a0=896a930 a1=8969f48 a2=896ae68 a3=0 items=0 ppid=3977 pid=3978 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="ntpd" exe="/usr/sbin/ntpd" subj=unconfined_u:system_r:ntpd_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 453391: 310572 | 312005