Attachment 313882 Details for Bug 458547 – start form terminal and menu - maeage in terminal -selinux AVC

start form terminal and menu - maeage in terminal -selinux AVC

serv_se.txt (text/plain), 4.03 KB, created by Flóki Pálsson on 2008-08-09 18:11:16 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Flóki Pálsson

Created: 2008-08-09 18:11:16 UTC

Size: 4.03 KB

patch

obsolete

>
>[floki@localhost ~]$ rpm -q system-config-services
>system-config-services-0.99.21-1.fc10.noarch
>
>[floki@localhost ~]$ /usr/bin/system-config-services
>Traceback (most recent call last):
>  File "/usr/bin/system-config-services", line 832, in <module>
>    GUI (use_dbus = use_dbus).run ()
>  File "/usr/bin/system-config-services", line 807, in __init__
>    self.serviceherders.append (cls (bus = self._bus))
>  File "/usr/lib/python2.5/site-packages/scservices/dbus/proxy/serviceherders.py", line 43, in __init__
>    self.dbus_object = bus.get_object (dbus_service_name, self.dbus_service_path)
>  File "/usr/lib/python2.5/site-packages/dbus/bus.py", line 244, in get_object
>    follow_name_owner_changes=follow_name_owner_changes)
>  File "/usr/lib/python2.5/site-packages/dbus/proxies.py", line 241, in __init__
>    self._named_service = conn.activate_name_owner(bus_name)
>  File "/usr/lib/python2.5/site-packages/dbus/bus.py", line 183, in activate_name_owner
>    self.start_service_by_name(bus_name)
>  File "/usr/lib/python2.5/site-packages/dbus/bus.py", line 281, in start_service_by_name
>    'su', (bus_name, flags)))
>  File "/usr/lib/python2.5/site-packages/dbus/connection.py", line 622, in call_blocking
>    message, timeout)
>dbus.exceptions.DBusException: org.freedesktop.DBus.Error.Spawn.ExecFailed: Cannot launch daemon, file not found or permissions invalid
>[floki@localhost ~]$ 
>
>
>From SELinux
>SummarySELinux is preventing the dbus-daemon-lau (system_dbusd_t) from executing ./system-config-services-mechanism.py. Detailed DescriptionSELinux has denied the dbus-daemon-lau from executing ./system-config-services-mechanism.py. If dbus-daemon-lau is supposed to be able to execute ./system-config-services-mechanism.py, this could be a labeling problem. Most confined domains are allowed to execute files labeled bin_t. So you could change the labeling on this file to bin_t and retry the application. If this dbus-daemon-lau is not supposed to execute ./system-config-services-mechanism.py, this could signal a intrusion attempt. Allowing AccessIf you want to allow dbus-daemon-lau to execute ./system-config-services-mechanism.py: chcon -t bin_t './system-config-services-mechanism.py' If this fix works, please update the file context on disk, with the following command: semanage fcontext -a -t bin_t './system-config-services-mechanism.py' Please specify the full path to the executable, Please file a bug report against this selinux-policy to make sure this becomes the default labeling. Additional InformationSource Context:Â Â system_u:system_r:system_dbusd_t:s0-s0:c0.c1023Target Context:Â Â system_u:object_r:usr_t:s0Target Objects:Â Â ./system-config-services-mechanism.py [ file ]Source:Â Â dbus-daemon-lauSource Path:Â Â /lib64/dbus-1/dbus-daemon-launch-helperPort:Â Â <Unknown>Host:Â Â localhost.localdomainSource RPM Packages:Â Â dbus-1.2.3-1.fc10Target RPM Packages:Â Â Policy RPM:Â Â selinux-policy-3.5.1-4.fc10Selinux Enabled:Â Â TruePolicy Type:Â Â targetedMLS Enabled:Â Â TrueEnforcing Mode:Â Â EnforcingPlugin Name:Â Â executeHost Name:Â Â localhost.localdomainPlatform:Â Â Linux localhost.localdomain 2.6.27-0.238.rc2.fc10.x86_64 #1 SMP Thu Aug 7 07:47:54 EDT 2008 x86_64 x86_64Alert Count:Â Â 10First Seen:Â Â miÃ° 6.Ã¡gÃº 2008, 21:29:06 GMTLast Seen:Â Â lau 9.Ã¡gÃº 2008, 18:01:13 GMTLocal ID:Â Â 8cf96009-0eb5-4863-af4c-3658cd30230cLine Numbers:Â Â Raw Audit Messages :host=localhost.localdomain type=AVC msg=audit(1218304873.33:124): avc: denied { execute } for pid=3956 comm="dbus-daemon-lau" name="system-config-services-mechanism.py" dev=dm-0 ino=52788 scontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file host=localhost.localdomain type=SYSCALL msg=audit(1218304873.33:124): arch=c000003e syscall=59 success=no exit=-13 a0=1f357b0 a1=1f34540 a2=1f34010 a3=696e616863656d2d items=0 ppid=3955 pid=3956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dbus-daemon-lau" exe="/lib64/dbus-1/dbus-daemon-launch-helper" subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 key=(null)
>

Actions: View

Attachments on bug 458547: 313882