Attachment 311949 Details for Bug 455584 – AVC denials

AVC denials

selinux_denials (text/plain), 2.96 KB, created by Adam Tkac on 2008-07-16 13:22:53 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Adam Tkac

Created: 2008-07-16 13:22:53 UTC

Size: 2.96 KB

patch

obsolete

>type=AVC msg=audit(1216213007.272:49): avc:  denied  { write } for  pid=3005 comm="xdm" name="authfiles" dev=dm-0 ino=885311 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_t:s0 tclass=dir
>type=AVC msg=audit(1216213007.272:49): avc:  denied  { remove_name } for  pid=3005 comm="xdm" name="A:0-EQRIz0" dev=dm-0 ino=884749 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_t:s0 tclass=dir
>type=AVC msg=audit(1216213007.272:49): avc:  denied  { unlink } for  pid=3005 comm="xdm" name="A:0-EQRIz0" dev=dm-0 ino=884749 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=AVC msg=audit(1216213008.750:51): avc:  denied  { add_name } for  pid=3147 comm="xdm" name="A:0-hd95Lp" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_t:s0 tclass=dir
>
>^^^
>/etc/X11/xdm/authdir/authfiles directory should be writable (file "A:0-EQRIz0"
>is created in this case)
>
>type=AVC msg=audit(1216213008.743:50): avc:  denied  { write } for  pid=3147 comm="xdm" name="xdm.log" dev=dm-0 ino=985569 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=AVC msg=audit(1216213703.026:62): avc:  denied  { write } for  pid=3224 comm="pam_console_app" path="/var/log/xdm.log" dev=dm-0 ino=985569 scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>
>^^^ policy should allow create /var/log/xdm.log file
>
>type=AVC msg=audit(1216213703.273:65): avc:  denied  { write } for  pid=3241 comm="dbus-daemon" path="/home/atkac/.xsession-errors" dev=dm-1 ino=24870923 scontext=system_u:system_r:xdm_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>
>^^^ allow dbus logging
>
>type=AVC msg=audit(1216213703.498:66): avc:  denied  { read } for  pid=3250 comm="tpb" name="nvram" dev=tmpfs ino=3758 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nvram_device_t:s0 tclass=chr_file
>
>^^^ it seems that it prevents tpb utility to start correctly
>
>type=AVC msg=audit(1216213711.124:67): avc:  denied  { read write } for  pid=3293 comm="xterm" name="ptmx" dev=tmpfs ino=224 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ptmx_t:s0 tclass=chr_file
>type=AVC msg=audit(1216213711.125:68): avc:  denied  { ioctl } for  pid=3293 comm="xterm" path="/dev/ptmx" dev=tmpfs ino=224 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ptmx_t:s0 tclass=chr_file
>type=AVC msg=audit(1216213711.376:70): avc:  denied  { setattr } for  pid=3295 comm="xterm" name="2" dev=devpts ino=4 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file
>
>
>
>type=AVC msg=audit(1216213711.371:69): avc:  denied  { getattr } for  pid=3294 comm="utempter" path="/dev/ptmx" dev=tmpfs ino=224 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ptmx_t:s0 tclass=chr_file
>
>^^^ I'm not sure what is this
>

Actions: View

Attachments on bug 455584: 311949