Attachment 589008 Details for Bug 828017 – File: description

File: description

description (text/plain), 2.59 KB, created by youzhihong on 2012-06-04 02:30:12 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: youzhihong

Created: 2012-06-04 02:30:12 UTC

Size: 2.59 KB

patch

obsolete

>SELinux is preventing /usr/lib/xulrunner-2/plugin-container from 'setattr' accesses on the sock_file socket-14746-703575480.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If æ¨ç¡®å®åºé»è®¤åè®¸ plugin-container setattr è®¿é® socket-14746-703575480 sock_fileã
>Then æ¨åºè¯¥å°è¿ä¸ªæåµä½ä¸º bug æ¥åã
>æ¨å¯ä»¥çææ¬å°çç¥æ¨¡ååè®¸è¿ä¸ªè®¿é®ã
>Do
>è¯·æ§è¡ä»¥ä¸å½ä»¤æ¤æ¶åè®¸è¿ä¸ªè®¿é®ï¼
># grep plugin-containe /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c
>                              0.c1023
>Target Context                unconfined_u:object_r:xdm_tmp_t:s0
>Target Objects                socket-14746-703575480 [ sock_file ]
>Source                        plugin-containe
>Source Path                   /usr/lib/xulrunner-2/plugin-container
>Port                          <æªç¥>
>Host                          (removed)
>Source RPM Packages           xulrunner-12.0-1.fc17.i686
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.10.0-125.fc17.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.3.7-1.fc17.i686.PAE
>                              #1 SMP Mon May 21 22:42:05 UTC 2012 i686 i686
>Alert Count                   3
>First Seen                    2012å¹´06æ03æ¥ æææ¥ 22æ¶34å52ç§
>Last Seen                     2012å¹´06æ03æ¥ æææ¥ 23æ¶32å03ç§
>Local ID                      fee05f6c-2d82-4258-b1a7-d02774ff5b9a
>
>Raw Audit Messages
>type=AVC msg=audit(1338737523.114:275): avc:  denied  { setattr } for  pid=14746 comm="plugin-containe" name="socket-14746-703575480" dev="dm-3" ino=327 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:xdm_tmp_t:s0 tclass=sock_file
>
>
>type=SYSCALL msg=audit(1338737523.114:275): arch=i386 syscall=chmod success=no exit=EACCES a0=b55d4280 a1=1ff a2=b5b80ff4 a3=b55d4280 items=0 ppid=14691 pid=14746 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=14 comm=plugin-containe exe=/usr/lib/xulrunner-2/plugin-container subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null)
>
>Hash: plugin-containe,mozilla_plugin_t,xdm_tmp_t,sock_file,setattr
>
>audit2allowunable to open /sys/fs/selinux/policy:  Permission denied
>
>
>audit2allow -Runable to open /sys/fs/selinux/policy:  Permission denied
>
>

Actions: View

Attachments on bug 828017: 589008