Attachment 312005 Details for Bug 453391 – SELinux message

SELinux message

ntp_selinux (text/plain), 2.59 KB, created by Didier G on 2008-07-16 23:21:10 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Didier G

Created: 2008-07-16 23:21:10 UTC

Size: 2.59 KB

patch

obsolete

>RÃ©sumÃ©:
>
>SELinux is preventing the ntpd from using potentially mislabeled files
>(/home/azerty/.xsession-errors).
>
>Description dÃ©taillÃ©e:
>
>SELinux has denied ntpd access to potentially mislabeled file(s)
>(/home/azerty/.xsession-errors). This means that SELinux will not allow ntpd to
>use these files. It is common for users to edit files in their home directory or
>tmp directories and then move (mv) them to system directories. The problem is
>that the files end up with the wrong file context which confined applications
>are not allowed to access.
>
>Autoriser l'accÃ¨s:
>
>If you want ntpd to access this files, you need to relabel them using restorecon
>-v '/home/azerty/.xsession-errors'. You might want to relabel the entire
>directory using restorecon -R -v '/home/azerty'.
>
>Informations complÃ©mentaires:
>
>Contexte source               unconfined_u:system_r:ntpd_t:s0
>Contexte cible                system_u:object_r:user_home_t:s0
>Objets du contexte            /home/azerty/.xsession-errors [ file ]
>source                        ntpd
>Chemin de la source           /usr/sbin/ntpd
>Port                          <Inconnu>
>HÃ´te                         lx-azerty.qwerty
>Paquetages RPM source         ntp-4.2.4p4-6.fc9
>Paquetages RPM cible          
>Politique RPM                 selinux-policy-3.3.1-78.fc9
>Selinux activÃ©               True
>Type de politique             targeted
>MLS activÃ©                   True
>Mode strict                   Enforcing
>Nom du plugin                 home_tmp_bad_labels
>Nom de l'hÃ´te                lx-azerty.qwerty
>Plateforme                    Linux lx-azerty.qwerty 2.6.25.10-86.fc9.i686 #1
>                              SMP Mon Jul 7 20:46:03 EDT 2008 i686 athlon
>Compteur d'alertes            12
>PremiÃ¨re alerte              mar 15 jui 2008 04:05:43 CEST
>DerniÃ¨re alerte              jeu 17 jui 2008 01:14:43 CEST
>ID local                      2d1fd953-c88a-4680-80dd-d2ddb132728f
>NumÃ©ros des lignes           
>
>Messages d'audit bruts        
>
>host=lx-azerty.qwerty type=AVC msg=audit(1216250083.754:55): avc:  denied  { read } for  pid=5246 comm="ntpd" path="/home/azerty/.xsession-errors" dev=dm-1 ino=109379598 scontext=unconfined_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>
>host=lx-azerty.qwerty type=SYSCALL msg=audit(1216250083.754:55): arch=40000003 syscall=11 success=yes exit=0 a0=8c5c8f0 a1=8c5bf08 a2=8c5ce28 a3=0 items=0 ppid=5245 pid=5246 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="ntpd" exe="/usr/sbin/ntpd" subj=unconfined_u:system_r:ntpd_t:s0 key=(null)
>
>
>

Actions: View

Attachments on bug 453391: 310572 | 312005