Attachment 537782 Details for Bug 757969 – File: description

File: description

description (text/plain), 2.23 KB, created by Frederick Mertens on 2011-11-29 04:53:32 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Frederick Mertens

Created: 2011-11-29 04:53:32 UTC

Size: 2.23 KB

patch

obsolete

>SELinux is preventing /usr/sbin/mcelog from 'create' accesses on the file mcelog.pid.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If you believe that mcelog should be allowed create access on the mcelog.pid file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep mcelog /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:mcelog_t:s0
>Target Context                system_u:object_r:var_run_t:s0
>Target Objects                mcelog.pid [ file ]
>Source                        mcelog
>Source Path                   /usr/sbin/mcelog
>Port                          <Unbekannt>
>Host                          (removed)
>Source RPM Packages           mcelog-1.0-0.3.6e4e2a00.fc16
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.10.0-56.fc16
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.1.2-1.fc16.i686 #1 SMP
>                              Tue Nov 22 08:56:28 UTC 2011 i686 i686
>Alert Count                   1
>First Seen                    Di 29 Nov 2011 05:44:59 CET
>Last Seen                     Di 29 Nov 2011 05:44:59 CET
>Local ID                      bc5c756a-8827-4a37-91ed-5a458960b378
>
>Raw Audit Messages
>type=AVC msg=audit(1322541899.18:153): avc:  denied  { create } for  pid=3503 comm="mcelog" name="mcelog.pid" scontext=system_u:system_r:mcelog_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1322541899.18:153): arch=i386 syscall=open success=no exit=EACCES a0=805db18 a1=241 a2=1b6 a3=0 items=0 ppid=1 pid=3503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=mcelog exe=/usr/sbin/mcelog subj=system_u:system_r:mcelog_t:s0 key=(null)
>
>Hash: mcelog,mcelog_t,var_run_t,file,create
>
>audit2allow
>
>#============= mcelog_t ==============
>allow mcelog_t var_run_t:file create;
>
>audit2allow -R
>
>#============= mcelog_t ==============
>allow mcelog_t var_run_t:file create;
>

Actions: View

Attachments on bug 757969: 537782