Attachment 312350 Details for Bug 456255 – First of 2 avc troubleshooter logs.

First of 2 avc troubleshooter logs.

selinux_alert1.txt (text/plain), 2.87 KB, created by Phil Moors on 2008-07-22 14:34:55 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Phil Moors

Created: 2008-07-22 14:34:55 UTC

Size: 2.87 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing sendmail (system_mail_t) "getattr" to
>/var/run/sm-client.pid (sendmail_var_run_t).
>
>Detailed Description:
>
>SELinux denied access requested by sendmail. It is not expected that this access
>is required by sendmail and this access may signal an intrusion attempt. It is
>also possible that the specific version or configuration of the application is
>causing it to require additional access.
>
>Allowing Access:
>
>Sometimes labeling problems can cause SELinux denials. You could try to restore
>the default system file context for /var/run/sm-client.pid,
>
>restorecon -v '/var/run/sm-client.pid'
>
>If this does not work, there is currently no automatic way to allow this access.
>Instead, you can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:system_mail_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:sendmail_var_run_t:s0
>Target Objects                /var/run/sm-client.pid [ file ]
>Source                        sendmail
>Source Path                   /usr/sbin/sendmail.sendmail
>Port                          <Unknown>
>Host                          reddwarf
>Source RPM Packages           sendmail-8.14.2-4.fc9
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.3.1-78.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall_file
>Host Name                     reddwarf
>Platform                      Linux reddwarf 2.6.25.10-86.fc9.x86_64 #1 SMP Mon
>                              Jul 7 20:23:46 EDT 2008 x86_64 x86_64
>Alert Count                   4
>First Seen                    Fri 18 Jul 2008 04:04:23 AM EDT
>Last Seen                     Tue 22 Jul 2008 04:04:25 AM EDT
>Local ID                      63a5070e-d718-4b76-953d-882351a7c9b1
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=reddwarf type=AVC msg=audit(1216713865.570:1172): avc:  denied  { getattr } for  pid=15076 comm="sendmail" path="/var/run/sm-client.pid" dev=dm-0 ino=8675395 scontext=system_u:system_r:system_mail_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sendmail_var_run_t:s0 tclass=file
>
>host=reddwarf type=SYSCALL msg=audit(1216713865.570:1172): arch=c000003e syscall=6 success=no exit=-13 a0=7fff4be951e0 a1=7fff4be96240 a2=7fff4be96240 a3=7fff4be9630f items=0 ppid=1 pid=15076 auid=0 uid=51 gid=51 euid=51 suid=51 fsuid=51 egid=51 sgid=51 fsgid=51 tty=(none) ses=154 comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0-s0:c0.c1023 key=(null)
>
>

Actions: View

Attachments on bug 456255: 312350 | 312351