Attachment 313899 Details for Bug 458613 – part off yum.log and SELinux AVC

part off yum.log and SELinux AVC

gnash.txt (text/plain), 2.92 KB, created by Flóki Pálsson on 2008-08-10 22:06:37 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Flóki Pálsson

Created: 2008-08-10 22:06:37 UTC

Size: 2.92 KB

patch

obsolete

>
>From yum log 
>Ã¡gÃº 10 21:14:04 Installed: swfdec.x86_64 0.7.4-1.fc10
>Ã¡gÃº 10 21:15:52 Installed: swfdec-gtk.x86_64 0.7.4-1.fc10
>Ã¡gÃº 10 21:16:01 Installed: swfdec-gnome.x86_64 2.23.2-1.fc10
>Ã¡gÃº 10 21:16:01 Installed: swfdec-mozilla.x86_64 0.7.4-1.fc10
>Ã¡gÃº 10 21:18:47 Installed: SDL.x86_64 1.2.13-5.fc10
>Ã¡gÃº 10 21:18:48 Installed: agg.x86_64 2.5-6.fc9
>Ã¡gÃº 10 21:18:51 Installed: libicu.x86_64 4.0-1.fc10
>Ã¡gÃº 10 21:18:54 Installed: boost.x86_64 1.34.1-16.fc10
>Ã¡gÃº 10 21:18:57 Installed: gnash.x86_64 0.8.3-2.fc10
>Ã¡gÃº 10 21:18:58 Installed: gnash-plugin.x86_64 0.8.3-2.fc10
>Ã¡gÃº 10 21:18:58 Installed: gnash-klash.x86_64 0.8.3-2.fc10
>Ã¡gÃº 10 21:18:58 Installed: gnash-cygnal.x86_64 0.8.3-2.fc10
>
>
>AVC 
>SELinux is preventing the gtk-gnash from using potentially mislabeled files (./.pulse). Detailed DescriptionSELinux has denied gtk-gnash access to potentially mislabeled file(s) (./.pulse). This means that SELinux will not allow gtk-gnash to use these files. It is common for users to edit files in their home directory or tmp directories and then move (mv) them to system directories. The problem is that the files end up with the wrong file context which confined applications are not allowed to access. Allowing AccessIf you want gtk-gnash to access this files, you need to relabel them using restorecon -v './.pulse'. You might want to relabel the entire directory using restorecon -R -v './.pulse'. Additional InformationSource Context:Â Â unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023Target Context:Â Â unconfined_u:object_r:user_home_t:s0Target Objects:Â Â ./.pulse [ dir ]Source:Â Â npviewer.binSource Path:Â Â /usr/lib64/nspluginwrapper/npviewer.binPort:Â Â <Unknown>Host:Â Â localhost.localdomainSource RPM Packages:Â Â gnash-0.8.3-2.fc10Target RPM Packages:Â Â Policy RPM:Â Â selinux-policy-3.5.1-4.fc10Selinux Enabled:Â Â TruePolicy Type:Â Â targetedMLS Enabled:Â Â TrueEnforcing Mode:Â Â EnforcingPlugin Name:Â Â home_tmp_bad_labelsHost Name:Â Â localhost.localdomainPlatform:Â Â Linux localhost.localdomain 2.6.27-0.244.rc2.git1.fc10.x86_64 #1 SMP Fri Aug 8 13:14:06 EDT 2008 x86_64 x86_64Alert Count:Â Â 193First Seen:Â Â sun 10.Ã¡gÃº 2008, 21:21:34 GMTLast Seen:Â Â sun 10.Ã¡gÃº 2008, 21:50:27 GMTLocal ID:Â Â 8faa61f8-2d30-4e13-89f8-e77ba8bc4891Line Numbers:Â Â Raw Audit Messages :host=localhost.localdomain type=AVC msg=audit(1218405027.171:95): avc: denied { setattr } for pid=3396 comm="gtk-gnash" name=".pulse" dev=dm-0 ino=147554 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=dir host=localhost.localdomain type=SYSCALL msg=audit(1218405027.171:95): arch=c000003e syscall=90 success=yes exit=0 a0=15ff710 a1=1c0 a2=d a3=8101010101010100 items=0 ppid=3161 pid=3396 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="gtk-gnash" exe="/usr/bin/gtk-gnash" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null)

Actions: View

Attachments on bug 458613: 313899