Attachment 311059 Details for Bug 452320 – output from setroubleshoot

output from setroubleshoot

selinux_alert_7-04.txt (text/plain), 2.77 KB, created by Craig Goodyear on 2008-07-04 21:46:06 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Craig Goodyear

Created: 2008-07-04 21:46:06 UTC

Size: 2.77 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing amidxtaped (amanda_t) "read" to nst0 (tape_device_t).
>
>Detailed Description:
>
>SELinux denied access requested by amidxtaped. It is not expected that this
>access is required by amidxtaped and this access may signal an intrusion
>attempt. It is also possible that the specific version or configuration of the
>application is causing it to require additional access.
>
>Allowing Access:
>
>Sometimes labeling problems can cause SELinux denials. You could try to restore
>the default system file context for nst0,
>
>restorecon -v 'nst0'
>
>If this does not work, there is currently no automatic way to allow this access.
>Instead, you can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:amanda_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:tape_device_t:s0
>Target Objects                nst0 [ chr_file ]
>Source                        amidxtaped
>Source Path                   /usr/lib/amanda/amidxtaped
>Port                          <Unknown>
>Host                          cm.localdomain
>Source RPM Packages           amanda-server-2.5.2p1-10.fc9
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.3.1-74.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall_file
>Host Name                     cm.localdomain
>Platform                      Linux cm.localdomain 2.6.25.9-76.fc9.i686 #1 SMP
>                              Fri Jun 27 16:14:35 EDT 2008 i686 athlon
>Alert Count                   2
>First Seen                    Fri 20 Jun 2008 03:36:34 PM CDT
>Last Seen                     Fri 04 Jul 2008 04:26:38 PM CDT
>Local ID                      caf12b34-5b0e-4f5c-83d7-19bba57bd01a
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=cm.localdomain type=AVC msg=audit(1215206798.713:2100): avc:  denied  { read } for  pid=32247 comm="amidxtaped" name="nst0" dev=tmpfs ino=5795 scontext=system_u:system_r:amanda_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tape_device_t:s0 tclass=chr_file
>
>host=cm.localdomain type=SYSCALL msg=audit(1215206798.713:2100): arch=40000003 syscall=5 success=no exit=-13 a0=b9145670 a1=8000 a2=0 a3=8000 items=0 ppid=32227 pid=32247 auid=4294967295 uid=33 gid=6 euid=33 suid=33 fsuid=33 egid=6 sgid=6 fsgid=6 tty=(none) ses=4294967295 comm="amidxtaped" exe="/usr/lib/amanda/amidxtaped" subj=system_u:system_r:amanda_t:s0-s0:c0.c1023 key=(null)
>
>

Actions: View

Attachments on bug 452320: 309951 | 311059