Attachment 310730 Details for Bug 453217 – selinux alert log triggered during update

selinux alert log triggered during update

selinux_alert.txt (text/plain), 2.86 KB, created by hal on 2008-07-01 21:56:38 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: hal

Created: 2008-07-01 21:56:38 UTC

Size: 2.86 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing updatedb (locate_t) "getattr" to /home/perkins/.gnome2
>(unlabeled_t).
>
>Detailed Description:
>
>SELinux denied access requested by updatedb. It is not expected that this access
>is required by updatedb and this access may signal an intrusion attempt. It is
>also possible that the specific version or configuration of the application is
>causing it to require additional access.
>
>Allowing Access:
>
>Sometimes labeling problems can cause SELinux denials. You could try to restore
>the default system file context for /home/perkins/.gnome2,
>
>restorecon -v '/home/perkins/.gnome2'
>
>If this does not work, there is currently no automatic way to allow this access.
>Instead, you can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:locate_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:unlabeled_t:s0
>Target Objects                /home/perkins/.gnome2 [ dir ]
>Source                        updatedb
>Source Path                   /usr/bin/updatedb
>Port                          <Unknown>
>Host                          localhost.localdomain
>Source RPM Packages           mlocate-0.21-1.fc10
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.4.2-8.fc10
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall_file
>Host Name                     localhost.localdomain
>Platform                      Linux localhost.localdomain
>                              2.6.26-0.97.rc8.fc10.i686 #1 SMP Sat Jun 28
>                              11:36:07 EDT 2008 i686 i686
>Alert Count                   1
>First Seen                    Tue 01 Jul 2008 04:05:38 AM PDT
>Last Seen                     Tue 01 Jul 2008 04:05:38 AM PDT
>Local ID                      27f3e302-771a-4c98-a72a-1a9bdb2c48c5
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=localhost.localdomain type=AVC msg=audit(1214910338.80:147): avc:  denied  { getattr } for  pid=26036 comm="updatedb" path="/home/perkins/.gnome2" dev=dm-0 ino=141220 scontext=system_u:system_r:locate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
>
>host=localhost.localdomain type=SYSCALL msg=audit(1214910338.80:147): arch=40000003 syscall=196 success=no exit=-13 a0=8e18505 a1=bffb24a8 a2=beeff4 a3=8e18505 items=0 ppid=26030 pid=26036 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0-s0:c0.c1023 key=(null)
>
>

Actions: View

Attachments on bug 453217: 310730