Attachment 580842 Details for Bug 817128 – File: description

File: description

description (text/plain), 2.29 KB, created by Mitrandir on 2012-04-27 19:01:38 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Mitrandir

Created: 2012-04-27 19:01:38 UTC

Size: 2.29 KB

patch

obsolete

>SELinux is preventing /usr/libexec/mysqld from 'read' accesses on the ÑÐ°Ð¹Ð» unix.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If you believe that mysqld should be allowed read access on the unix file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep mysqld /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:mysqld_t:s0
>Target Context                system_u:object_r:proc_net_t:s0
>Target Objects                unix [ file ]
>Source                        mysqld
>Source Path                   /usr/libexec/mysqld
>Port                          <ÐÐµÐ¸Ð·Ð²ÐµÑÑÐ½Ð¾>
>Host                          (removed)
>Source RPM Packages           mysql-server-5.5.22-1.fc16.i686
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.10.0-84.fc16.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.3.2-6.fc16.i686.PAE
>                              #1 SMP Sat Apr 21 13:02:14 UTC 2012 i686 i686
>Alert Count                   1
>First Seen                    ÐÑ. 27 Ð°Ð¿Ñ. 2012 23:00:35
>Last Seen                     ÐÑ. 27 Ð°Ð¿Ñ. 2012 23:00:35
>Local ID                      b90bb020-8ba5-48cd-a688-9fc1b62d317b
>
>Raw Audit Messages
>type=AVC msg=audit(1335553235.257:397): avc:  denied  { read } for  pid=17207 comm="mysqld" name="unix" dev="proc" ino=4026532000 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1335553235.257:397): arch=i386 syscall=access success=no exit=EACCES a0=a907903b a1=4 a2=457b1ff4 a3=a9079041 items=0 ppid=1 pid=17207 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) ses=4294967295 comm=mysqld exe=/usr/libexec/mysqld subj=system_u:system_r:mysqld_t:s0 key=(null)
>
>Hash: mysqld,mysqld_t,proc_net_t,file,read
>
>audit2allow
>
>#============= mysqld_t ==============
>allow mysqld_t proc_net_t:file read;
>
>audit2allow -R
>
>#============= mysqld_t ==============
>allow mysqld_t proc_net_t:file read;
>

Actions: View

Attachments on bug 817128: 580842