Attachment 588871 Details for Bug 827892 – File: description

File: description

description (text/plain), 2.57 KB, created by youzhihong on 2012-06-03 14:19:37 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: youzhihong

Created: 2012-06-03 14:19:37 UTC

Size: 2.57 KB

patch

obsolete

>SELinux is preventing /usr/lib/xulrunner-2/plugin-container from 'create' accesses on the sock_file socket-10640-812321652.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If æ¨ç¡®å®åºé»è®¤åè®¸ plugin-container create è®¿é® socket-10640-812321652 sock_fileã
>Then æ¨åºè¯¥å°è¿ä¸ªæåµä½ä¸º bug æ¥åã
>æ¨å¯ä»¥çææ¬å°çç¥æ¨¡ååè®¸è¿ä¸ªè®¿é®ã
>Do
>è¯·æ§è¡ä»¥ä¸å½ä»¤æ¤æ¶åè®¸è¿ä¸ªè®¿é®ï¼
># grep plugin-containe /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c
>                              0.c1023
>Target Context                unconfined_u:object_r:xdm_tmp_t:s0
>Target Objects                socket-10640-812321652 [ sock_file ]
>Source                        plugin-containe
>Source Path                   /usr/lib/xulrunner-2/plugin-container
>Port                          <æªç¥>
>Host                          (removed)
>Source RPM Packages           xulrunner-12.0-1.fc17.i686
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.10.0-125.fc17.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.3.7-1.fc17.i686.PAE
>                              #1 SMP Mon May 21 22:42:05 UTC 2012 i686 i686
>Alert Count                   1
>First Seen                    2012å¹´06æ03æ¥ æææ¥ 22æ¶13å47ç§
>Last Seen                     2012å¹´06æ03æ¥ æææ¥ 22æ¶13å47ç§
>Local ID                      9a56fbb2-c892-456a-8c24-9137b493f7f3
>
>Raw Audit Messages
>type=AVC msg=audit(1338732827.673:213): avc:  denied  { create } for  pid=10640 comm="plugin-containe" name="socket-10640-812321652" scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:xdm_tmp_t:s0 tclass=sock_file
>
>
>type=SYSCALL msg=audit(1338732827.673:213): arch=i386 syscall=socketcall success=no exit=EACCES a0=2 a1=bff804e0 a2=b5af5ff4 a3=b54d17c0 items=0 ppid=10591 pid=10640 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=6 comm=plugin-containe exe=/usr/lib/xulrunner-2/plugin-container subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null)
>
>Hash: plugin-containe,mozilla_plugin_t,xdm_tmp_t,sock_file,create
>
>audit2allowunable to open /sys/fs/selinux/policy:  Permission denied
>
>
>audit2allow -Runable to open /sys/fs/selinux/policy:  Permission denied
>
>

Actions: View

Attachments on bug 827892: 588871