Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 313882 Details for
Bug 458547
system-config-services - SELinux is preventing the dbus-daemon-lau
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
start form terminal and menu - maeage in terminal -selinux AVC
serv_se.txt (text/plain), 4.03 KB, created by
Flóki Pálsson
on 2008-08-09 18:11:16 UTC
(
hide
)
Description:
start form terminal and menu - maeage in terminal -selinux AVC
Filename:
MIME Type:
Creator:
Flóki Pálsson
Created:
2008-08-09 18:11:16 UTC
Size:
4.03 KB
patch
obsolete
> >[floki@localhost ~]$ rpm -q system-config-services >system-config-services-0.99.21-1.fc10.noarch > >[floki@localhost ~]$ /usr/bin/system-config-services >Traceback (most recent call last): > File "/usr/bin/system-config-services", line 832, in <module> > GUI (use_dbus = use_dbus).run () > File "/usr/bin/system-config-services", line 807, in __init__ > self.serviceherders.append (cls (bus = self._bus)) > File "/usr/lib/python2.5/site-packages/scservices/dbus/proxy/serviceherders.py", line 43, in __init__ > self.dbus_object = bus.get_object (dbus_service_name, self.dbus_service_path) > File "/usr/lib/python2.5/site-packages/dbus/bus.py", line 244, in get_object > follow_name_owner_changes=follow_name_owner_changes) > File "/usr/lib/python2.5/site-packages/dbus/proxies.py", line 241, in __init__ > self._named_service = conn.activate_name_owner(bus_name) > File "/usr/lib/python2.5/site-packages/dbus/bus.py", line 183, in activate_name_owner > self.start_service_by_name(bus_name) > File "/usr/lib/python2.5/site-packages/dbus/bus.py", line 281, in start_service_by_name > 'su', (bus_name, flags))) > File "/usr/lib/python2.5/site-packages/dbus/connection.py", line 622, in call_blocking > message, timeout) >dbus.exceptions.DBusException: org.freedesktop.DBus.Error.Spawn.ExecFailed: Cannot launch daemon, file not found or permissions invalid >[floki@localhost ~]$ > > >From SELinux >SummarySELinux is preventing the dbus-daemon-lau (system_dbusd_t) from executing ./system-config-services-mechanism.py. Detailed DescriptionSELinux has denied the dbus-daemon-lau from executing ./system-config-services-mechanism.py. If dbus-daemon-lau is supposed to be able to execute ./system-config-services-mechanism.py, this could be a labeling problem. Most confined domains are allowed to execute files labeled bin_t. So you could change the labeling on this file to bin_t and retry the application. If this dbus-daemon-lau is not supposed to execute ./system-config-services-mechanism.py, this could signal a intrusion attempt. Allowing AccessIf you want to allow dbus-daemon-lau to execute ./system-config-services-mechanism.py: chcon -t bin_t './system-config-services-mechanism.py' If this fix works, please update the file context on disk, with the following command: semanage fcontext -a -t bin_t './system-config-services-mechanism.py' Please specify the full path to the executable, Please file a bug report against this selinux-policy to make sure this becomes the default labeling. Additional InformationSource Context:  system_u:system_r:system_dbusd_t:s0-s0:c0.c1023Target Context:  system_u:object_r:usr_t:s0Target Objects:  ./system-config-services-mechanism.py [ file ]Source:  dbus-daemon-lauSource Path:  /lib64/dbus-1/dbus-daemon-launch-helperPort:  <Unknown>Host:  localhost.localdomainSource RPM Packages:  dbus-1.2.3-1.fc10Target RPM Packages:  Policy RPM:  selinux-policy-3.5.1-4.fc10Selinux Enabled:  TruePolicy Type:  targetedMLS Enabled:  TrueEnforcing Mode:  EnforcingPlugin Name:  executeHost Name:  localhost.localdomainPlatform:  Linux localhost.localdomain 2.6.27-0.238.rc2.fc10.x86_64 #1 SMP Thu Aug 7 07:47:54 EDT 2008 x86_64 x86_64Alert Count:  10First Seen:  mið 6.ágú 2008, 21:29:06 GMTLast Seen:  lau 9.ágú 2008, 18:01:13 GMTLocal ID:  8cf96009-0eb5-4863-af4c-3658cd30230cLine Numbers:  Raw Audit Messages :host=localhost.localdomain type=AVC msg=audit(1218304873.33:124): avc: denied { execute } for pid=3956 comm="dbus-daemon-lau" name="system-config-services-mechanism.py" dev=dm-0 ino=52788 scontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file host=localhost.localdomain type=SYSCALL msg=audit(1218304873.33:124): arch=c000003e syscall=59 success=no exit=-13 a0=1f357b0 a1=1f34540 a2=1f34010 a3=696e616863656d2d items=0 ppid=3955 pid=3956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dbus-daemon-lau" exe="/lib64/dbus-1/dbus-daemon-launch-helper" subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 key=(null) >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 458547
: 313882