Attachment 312285 Details for Bug 456137 – output of sealert -l b115b681-c98f-449d-9e5f-f2fc7123666a

output of sealert -l b115b681-c98f-449d-9e5f-f2fc7123666a

sealert.message (text/plain), 2.50 KB, created by Joel on 2008-07-21 18:04:38 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Joel

Created: 2008-07-21 18:04:38 UTC

Size: 2.50 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing gam_server (unlabeled_t) "read" to inotify (inotifyfs_t).
>
>Detailed Description:
>
>SELinux denied access requested by gam_server. It is not expected that this
>access is required by gam_server and this access may signal an intrusion
>attempt. It is also possible that the specific version or configuration of the
>application is causing it to require additional access.
>
>Allowing Access:
>
>You can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:object_r:unlabeled_t
>Target Context                system_u:object_r:inotifyfs_t
>Target Objects                inotify [ dir ]
>Source                        gam_server
>Source Path                   /usr/libexec/gam_server
>Port                          <Unknown>
>Host                          quickstep.ern.nps.edu
>Source RPM Packages           gamin-0.1.9-5.fc9
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.3.1-78.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall
>Host Name                     quickstep.ern.nps.edu
>Platform                      Linux quickstep.ern.nps.edu 2.6.25.9-76.fc9.x86_64
>                              #1 SMP Fri Jun 27 15:58:30 EDT 2008 x86_64 x86_64
>Alert Count                   15815
>First Seen                    Mon Jul 21 10:06:41 2008
>Last Seen                     Mon Jul 21 10:08:44 2008
>Local ID                      b115b681-c98f-449d-9e5f-f2fc7123666a
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=quickstep.ern.nps.edu type=AVC msg=audit(1216660124.219:125616): avc:  denied  { read } for  pid=3218 comm="gam_server" path="inotify" dev=inotifyfs ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:inotifyfs_t:s0 tclass=dir
>
>host=quickstep.ern.nps.edu type=SYSCALL msg=audit(1216660124.219:125616): arch=c000003e syscall=0 success=no exit=-13 a0=3 a1=1c1b660 a2=400 a3=0 items=0 ppid=1 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="gam_server" exe="/usr/libexec/gam_server" subj=system_u:object_r:unlabeled_t:s0 key=(null)
>
>
>

Actions: View

Attachments on bug 456137: 312285