Attachment 315887 Details for Bug 461135 – SELinux Troubleshooter

[patch] SELinux Troubleshooter

selinux_alert.txt (text/plain), 2.51 KB, created by Martin Kuhnke on 2008-09-05 11:54:13 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Martin Kuhnke

Created: 2008-09-05 11:54:13 UTC

Size: 2.51 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing ccp (cupsd_t) "write" to fifo0 (var_t).
>
>Detailed Description:
>
>SELinux denied access requested by ccp. It is not expected that this access is
>required by ccp and this access may signal an intrusion attempt. It is also
>possible that the specific version or configuration of the application is
>causing it to require additional access.
>
>Allowing Access:
>
>You can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:cupsd_t:s0-s0:c0.c1023
>Target Context                unconfined_u:object_r:var_t:s0
>Target Objects                fifo0 [ fifo_file ]
>Source                        ccp
>Source Path                   /usr/lib/cups/backend/ccp
>Port                          <Unknown>
>Host                          localhost.localdomain
>Source RPM Packages           cndrvcups-capt-1.60-1
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.0.8-113.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall
>Host Name                     localhost.localdomain
>Platform                      Linux localhost.localdomain 2.6.25.14-69.fc8 #1
>                              SMP Mon Aug 4 14:20:24 EDT 2008 i686 i686
>Alert Count                   8
>First Seen                    Tue 02 Sep 2008 06:11:53 PM CEST
>Last Seen                     Wed 03 Sep 2008 05:14:49 PM CEST
>Local ID                      ebb30c22-8167-4ea4-8b9d-4b20b6aec065
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=localhost.localdomain type=AVC msg=audit(1220454889.345:20): avc:  denied  { write } for  pid=2550 comm="ccp" name="fifo0" dev=dm-0 ino=394171 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:var_t:s0 tclass=fifo_file
>
>host=localhost.localdomain type=SYSCALL msg=audit(1220454889.345:20): arch=40000003 syscall=5 per=400000 success=no exit=-13 a0=bf9db060 a1=81 a2=3f0 a3=bf9db060 items=0 ppid=1945 pid=2550 auid=4294967295 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) ses=4294967295 comm="ccp" exe="/usr/lib/cups/backend/ccp" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>
>

Actions: View | Diff

Attachments on bug 461135: 315887