Attachment 331889 Details for Bug 481453 – selinux alert description

selinux alert description

selinux_alert.txt (text/plain), 2.47 KB, created by Josh Stone on 2009-02-14 01:13:08 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Josh Stone

Created: 2009-02-14 01:13:08 UTC

Size: 2.47 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing dellWirelessCtl (hald_t) "execmem" hald_t.
>
>Detailed Description:
>
>SELinux denied access requested by dellWirelessCtl. It is not expected that this
>access is required by dellWirelessCtl and this access may signal an intrusion
>attempt. It is also possible that the specific version or configuration of the
>application is causing it to require additional access.
>
>Allowing Access:
>
>You can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:hald_t:s0
>Target Context                system_u:system_r:hald_t:s0
>Target Objects                None [ process ]
>Source                        dellWirelessCtl
>Source Path                   /usr/bin/python
>Port                          <Unknown>
>Host                          loki.cuviper.com
>Source RPM Packages           python-2.6-4.fc11
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.6.5-3.fc11
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall
>Host Name                     loki.cuviper.com
>Platform                      Linux loki.cuviper.com
>                              2.6.29-0.112.rc4.git3.fc11.i686.PAE #1 SMP Thu Feb
>                              12 07:19:54 EST 2009 i686 i686
>Alert Count                   362
>First Seen                    Fri 13 Feb 2009 03:53:20 PM PST
>Last Seen                     Fri 13 Feb 2009 05:07:33 PM PST
>Local ID                      24c019a5-8625-4e41-8482-dc3b1af592f9
>Line Numbers                  
>
>Raw Audit Messages            
>
>node=loki.cuviper.com type=AVC msg=audit(1234573653.382:724): avc:  denied  { execmem } for  pid=4125 comm="dellWirelessCtl" scontext=system_u:system_r:hald_t:s0 tcontext=system_u:system_r:hald_t:s0 tclass=process
>
>node=loki.cuviper.com type=SYSCALL msg=audit(1234573653.382:724): arch=40000003 syscall=192 success=no exit=-13 a0=0 a1=ff0 a2=7 a3=22 items=0 ppid=4122 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dellWirelessCtl" exe="/usr/bin/python" subj=system_u:system_r:hald_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 481453: 330965 | 330966 | 331889