Attachment 312786 Details for Bug 456904 – selinux alert

selinux alert

selinux_alert_rsyslogd.txt (text/plain), 2.52 KB, created by Martin Tack on 2008-07-28 15:31:51 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Martin Tack

Created: 2008-07-28 15:31:51 UTC

Size: 2.52 KB

patch

obsolete

>
>Samenvatting:
>
>SELinux is preventing rsyslogd (syslogd_t) "syslog_mod" to <Onbekend>
>(kernel_t).
>
>Gedetailleerde omschrijving:
>
>[SELinux is in permissive mode, the operation would have been denied but was
>permitted due to permissive mode.]
>
>SELinux denied access requested by rsyslogd. It is not expected that this access
>is required by rsyslogd and this access may signal an intrusion attempt. It is
>also possible that the specific version or configuration of the application is
>causing it to require additional access.
>
>Allowing Access:
>
>You can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additionele informatie:
>
>Source Context                system_u:system_r:syslogd_t:s0
>Target Context                system_u:system_r:kernel_t:s0
>Target Objects                None [ system ]
>Bron                          rsyslogd
>Source Path                   <Onbekend>
>Poort                         <Onbekend>
>Host                          xbox1.tam.com
>Source RPM Packages           rsyslog-3.16.1-2.fc9
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.3.1-79.fc9
>SELinux aangezet              True
>Policy Type                   seedit
>MLS aangezet                  True
>Enforcing Mode                Permissive
>Pluginnaam                    catchall
>Hostnaam                      xbox1.tam.com
>Platform                      Linux xbox1.tam.com 2.6.25.11-97.fc9.x86_64 #1 SMP
>                              Mon Jul 21 01:09:10 EDT 2008 x86_64 x86_64
>Aantal waarschuwingen         2
>Eerst gezien op               ma 28 jul 2008 16:42:07 CEST
>Laatst gezien op              ma 28 jul 2008 16:42:17 CEST
>Local ID                      ec80af05-a364-4f96-90b2-0d1d908cf773
>Regelnummers                  
>
>Raw Audit Messages            
>
>host=xbox1.tam.com type=AVC msg=audit(1217256137.577:58): avc:  denied  { syslog_mod } for  pid=1942 comm="rsyslogd" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system
>
>host=xbox1.tam.com type=SYSCALL msg=audit(1217256137.577:58): arch=c000003e syscall=0 success=yes exit=35 a0=7 a1=e498e0 a2=fff a3=0 items=0 ppid=1 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rsyslogd" exe="/sbin/rsyslogd" subj=system_u:system_r:syslogd_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 456904: 312786