Attachment 582498 Details for Bug 819350 – File: description

File: description

description (text/plain), 2.23 KB, created by Alexey on 2012-05-06 20:07:24 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Alexey

Created: 2012-05-06 20:07:24 UTC

Size: 2.23 KB

patch

obsolete

>SELinux is preventing service from 'open' accesses on the ÑÐ°Ð¹Ð» /etc/locale.conf.
>
>*****  Plugin restorecon (99.5 confidence) suggests  *************************
>
>If you want to fix the label. 
>/etc/locale.conf default label should be locale_t.
>Then you can run restorecon.
>Do
># /sbin/restorecon -v /etc/locale.conf
>
>*****  Plugin catchall (1.49 confidence) suggests  ***************************
>
>If you believe that service should be allowed open access on the locale.conf file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep service /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:sambagui_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:etc_runtime_t:s0
>Target Objects                /etc/locale.conf [ file ]
>Source                        service
>Source Path                   service
>Port                          <ÐÐµÐ¸Ð·Ð²ÐµÑÑÐ½Ð¾>
>Host                          (removed)
>Source RPM Packages           
>Target RPM Packages           systemd-37-19.fc16.i686
>Policy RPM                    selinux-policy-3.10.0-84.fc16.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.3.4-1.fc16.i686 #1 SMP Fri Apr 27
>                              20:52:27 UTC 2012 i686 i686
>Alert Count                   2
>First Seen                    ÐÐ½. 07 Ð¼Ð°Ñ 2012 00:04:43
>Last Seen                     ÐÐ½. 07 Ð¼Ð°Ñ 2012 00:04:56
>Local ID                      b472b548-53ba-4445-8a30-ee0e64c7c606
>
>Raw Audit Messages
>type=AVC msg=audit(1336334696.134:207): avc:  denied  { open } for  pid=19108 comm="service" name="locale.conf" dev="sda3" ino=141713 scontext=system_u:system_r:sambagui_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file
>
>
>Hash: service,sambagui_t,etc_runtime_t,file,open
>
>audit2allow
>
>#============= sambagui_t ==============
>allow sambagui_t etc_runtime_t:file open;
>
>audit2allow -R
>
>#============= sambagui_t ==============
>allow sambagui_t etc_runtime_t:file open;
>

Actions: View

Attachments on bug 819350: 582498