Attachment 315613 Details for Bug 460971 – AVC denials

AVC denials

fedora_denials (text/plain), 5.60 KB, created by Murray McAllister on 2008-09-03 02:47:37 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Murray McAllister

Created: 2008-09-03 02:47:37 UTC

Size: 5.60 KB

patch

obsolete

>sealert -l b4d20522-ab51-4077-96fe-02198ec0a1bc:
>
>Summary:
>
>SELinux is preventing service (semanage_t) "execute" to ./consoletype
>(consoletype_exec_t).
>
>Detailed Description:
>
>SELinux denied access requested by service. It is not expected that this access
>is required by service and this access may signal an intrusion attempt. It is
>also possible that the specific version or configuration of the application is
>causing it to require additional access.
>
>Allowing Access:
>
>Sometimes labeling problems can cause SELinux denials. You could try to restore
>the default system file context for ./consoletype,
>
>restorecon -v './consoletype'
>
>If this does not work, there is currently no automatic way to allow this access.
>Instead, you can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                unconfined_u:unconfined_r:semanage_t:SystemLow-
>                              SystemHigh
>Target Context                system_u:object_r:consoletype_exec_t
>Target Objects                ./consoletype [ file ]
>Source                        service
>Source Path                   /bin/bash
>Port                          <Unknown>
>Host                          localhost.localdomain
>Source RPM Packages           bash-3.2-27.fc10
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.5.5-3.fc10
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall_file
>Host Name                     localhost.localdomain
>Platform                      Linux localhost.localdomain
>                              2.6.27-0.290.rc5.fc10.i686 #1 SMP Thu Aug 28
>                              21:44:53 EDT 2008 i686 i686
>Alert Count                   14
>First Seen                    Wed Sep  3 11:03:53 2008
>Last Seen                     Wed Sep  3 11:23:27 2008
>Local ID                      b4d20522-ab51-4077-96fe-02198ec0a1bc
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=localhost.localdomain type=AVC msg=audit(1220405007.926:172): avc:  denied  { execute } for  pid=3948 comm="service" name="consoletype" dev=dm-0 ino=5120035 scontext=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:consoletype_exec_t:s0 tclass=file
>
>host=localhost.localdomain type=SYSCALL msg=audit(1220405007.926:172): arch=40000003 syscall=33 success=no exit=-13 a0=843d6e8 a1=1 a2=11 a3=843d6e8 items=0 ppid=3947 pid=3948 auid=502 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="service" exe="/bin/bash" subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 key=(null)
>
>sealert -l 573df62b-af61-4be4-9a45-2a033a92bae1:
>
>Summary:
>
>SELinux is preventing env (semanage_t) "transition" to /etc/rc.d/init.d/mcstrans
>(semanage_t).
>
>Detailed Description:
>
>SELinux denied access requested by env. It is not expected that this access is
>required by env and this access may signal an intrusion attempt. It is also
>possible that the specific version or configuration of the application is
>causing it to require additional access.
>
>Allowing Access:
>
>You can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                unconfined_u:unconfined_r:semanage_t:SystemLow-
>                              SystemHigh
>Target Context                unconfined_u:system_r:semanage_t
>Target Objects                /etc/rc.d/init.d/mcstrans [ process ]
>Source                        env
>Source Path                   /bin/env
>Port                          <Unknown>
>Host                          localhost.localdomain
>Source RPM Packages           coreutils-6.12-9.fc10
>Target RPM Packages           mcstrans-0.2.11-1.fc10
>Policy RPM                    selinux-policy-3.5.5-3.fc10
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall
>Host Name                     localhost.localdomain
>Platform                      Linux localhost.localdomain
>                              2.6.27-0.290.rc5.fc10.i686 #1 SMP Thu Aug 28
>                              21:44:53 EDT 2008 i686 i686
>Alert Count                   7
>First Seen                    Wed Sep  3 11:03:53 2008
>Last Seen                     Wed Sep  3 11:23:27 2008
>Local ID                      573df62b-af61-4be4-9a45-2a033a92bae1
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=localhost.localdomain type=AVC msg=audit(1220405007.942:173): avc:  denied  { transition } for  pid=3951 comm="env" path="/etc/rc.d/init.d/mcstrans" dev=dm-0 ino=1974310 scontext=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:semanage_t:s0 tclass=process
>
>host=localhost.localdomain type=SYSCALL msg=audit(1220405007.942:173): arch=40000003 syscall=11 success=no exit=-13 a0=bf8629fd a1=bf860914 a2=86c2888 a3=4 items=0 ppid=3946 pid=3951 auid=502 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="env" exe="/bin/env" subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 key=(null)

Actions: View

Attachments on bug 460971: 315613