Attachment 315429 Details for Bug 458037 – SELinux AVC starting services

SELinux AVC starting services

ser_selinux.txt (text/plain), 3.12 KB, created by Flóki Pálsson on 2008-08-30 21:10:27 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Flóki Pálsson

Created: 2008-08-30 21:10:27 UTC

Size: 3.12 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing the dbus-daemon-lau (system_dbusd_t) from executing
>./system-config-services-mechanism.py.
>
>Detailed Description:
>
>SELinux has denied the dbus-daemon-lau from executing
>./system-config-services-mechanism.py. If dbus-daemon-lau is supposed to be able
>to execute ./system-config-services-mechanism.py, this could be a labeling
>problem. Most confined domains are allowed to execute files labeled bin_t. So
>you could change the labeling on this file to bin_t and retry the application.
>If this dbus-daemon-lau is not supposed to execute
>./system-config-services-mechanism.py, this could signal a intrusion attempt.
>
>Allowing Access:
>
>If you want to allow dbus-daemon-lau to execute
>./system-config-services-mechanism.py: chcon -t bin_t
>'./system-config-services-mechanism.py' If this fix works, please update the
>file context on disk, with the following command: semanage fcontext -a -t bin_t
>'./system-config-services-mechanism.py' Please specify the full path to the
>executable, Please file a bug report
>(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this selinux-policy
>to make sure this becomes the default labeling.
>
>Additional Information:
>
>Source Context                system_u:system_r:system_dbusd_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:usr_t:s0
>Target Objects                ./system-config-services-mechanism.py [ file ]
>Source                        dbus-daemon-lau
>Source Path                   /lib64/dbus-1/dbus-daemon-launch-helper
>Port                          <Unknown>
>Host                          localhost.localdomain
>Source RPM Packages           dbus-1.2.3-1.fc10
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.5.5-1.fc10
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   execute
>Host Name                     localhost.localdomain
>Platform                      Linux localhost.localdomain
>                              2.6.27-0.290.rc5.fc10.x86_64 #1 SMP Thu Aug 28
>                              21:32:46 EDT 2008 x86_64 x86_64
>Alert Count                   3
>First Seen                    fÃ¶s 29.Ã¡gÃº 2008, 00:11:24 GMT
>Last Seen                     lau 30.Ã¡gÃº 2008, 21:03:21 GMT
>Local ID                      5ed3b460-cb51-452e-9bb5-318b4cb7d187
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=localhost.localdomain type=AVC msg=audit(1220130201.75:61): avc:  denied  { execute } for  pid=5480 comm="dbus-daemon-lau" name="system-config-services-mechanism.py" dev=dm-0 ino=14058161 scontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file
>
>host=localhost.localdomain type=SYSCALL msg=audit(1220130201.75:61): arch=c000003e syscall=59 success=no exit=-13 a0=15757f0 a1=15756e0 a2=1574010 a3=696e616863656d2d items=0 ppid=5479 pid=5480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dbus-daemon-lau" exe="/lib64/dbus-1/dbus-daemon-launch-helper" subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 key=(null)
>
>
>

Actions: View

Attachments on bug 458037: 313536 | 313537 | 313538 | 314467 | 315429 | 315430