Attachment 317856 Details for Bug 464298 – Sealert

Sealert

selinux_alert.txt (text/plain), 2.85 KB, created by Frank Murphy on 2008-09-27 09:08:20 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Frank Murphy

Created: 2008-09-27 09:08:20 UTC

Size: 2.85 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing consoletype (consoletype_t) "read" to
>/var/lib/dhclient/dhclient-eth0.leases (dhcpc_state_t).
>
>Detailed Description:
>
>SELinux denied access requested by consoletype. It is not expected that this
>access is required by consoletype and this access may signal an intrusion
>attempt. It is also possible that the specific version or configuration of the
>application is causing it to require additional access.
>
>Allowing Access:
>
>Sometimes labeling problems can cause SELinux denials. You could try to restore
>the default system file context for /var/lib/dhclient/dhclient-eth0.leases,
>
>restorecon -v '/var/lib/dhclient/dhclient-eth0.leases'
>
>If this does not work, there is currently no automatic way to allow this access.
>Instead, you can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                unconfined_u:system_r:consoletype_t:s0
>Target Context                unconfined_u:object_r:dhcpc_state_t:s0
>Target Objects                /var/lib/dhclient/dhclient-eth0.leases [ file ]
>Source                        consoletype
>Source Path                   /sbin/consoletype
>Port                          <Unknown>
>Host                          frank-01
>Source RPM Packages           initscripts-8.76.3-1
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.3.1-91.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall_file
>Host Name                     frank-01
>Platform                      Linux frank-01 2.6.26.3-29.fc9.i686 #1 SMP Wed Sep
>                              3 03:42:27 EDT 2008 i686 i686
>Alert Count                   1
>First Seen                    Sat 27 Sep 2008 09:59:25 IST
>Last Seen                     Sat 27 Sep 2008 09:59:25 IST
>Local ID                      26ae60eb-ec07-4fc4-8858-189188ff2508
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=frank-01 type=AVC msg=audit(1222505965.615:31): avc:  denied  { read } for  pid=5228 comm="consoletype" path="/var/lib/dhclient/dhclient-eth0.leases" dev=dm-0 ino=6799362 scontext=unconfined_u:system_r:consoletype_t:s0 tcontext=unconfined_u:object_r:dhcpc_state_t:s0 tclass=file
>
>host=frank-01 type=SYSCALL msg=audit(1222505965.615:31): arch=40000003 syscall=11 success=yes exit=0 a0=8a09270 a1=8a08d10 a2=8a08f10 a3=0 items=0 ppid=5227 pid=5228 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="consoletype" exe="/sbin/consoletype" subj=unconfined_u:system_r:consoletype_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 464298: 317856