Attachment 590811 Details for Bug 830634 – File: description

File: description

description (text/plain), 2.82 KB, created by Ken Sugawara on 2012-06-11 04:03:32 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ken Sugawara

Created: 2012-06-11 04:03:32 UTC

Size: 2.82 KB

patch

obsolete

>SELinux is preventing /usr/libexec/totem-plugin-viewer from 'rmdir' accesses on the directory /home/ksugawar/.nv/GLCache/7627299e856060b7a1cf3345db62a833.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If totem-plugin-viewer ã«ã 7627299e856060b7a1cf3345db62a833 directory ã® rmdir ã¢ã¯ã»ã¹ãããã©ã«ãã§è¨±å¯ãããã¹ãã§ãã   
>Then ããããã°ããã¦å ±åãã¹ãã§ãã 
>ãã®ã¢ã¯ã»ã¹ãè¨±å¯ããããã«ããã¼ã«ã«ããªã·ã¼ã¢ã¸ã¥ã¼ã«ãçæãããã¨ãã§ãã¾ãã
>Do
>ãã®ã¢ã¯ã»ã¹ãä¸æçã«è¨±å¯ããã«ã¯ãä»¥ä¸ãå®è¡ãã¦ãã ããã:
># grep totem-plugin-vi /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c
>                              0.c1023
>Target Context                unconfined_u:object_r:user_home_t:s0
>Target Objects                /home/ksugawar/.nv/GLCache/7627299e856060b7a1cf334
>                              5db62a833 [ dir ]
>Source                        totem-plugin-vi
>Source Path                   /usr/libexec/totem-plugin-viewer
>Port                          <ä¸æ>
>Host                          (removed)
>Source RPM Packages           totem-mozplugin-3.4.1-2.fc17.x86_64
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.10.0-121.fc17.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.3.4-5.fc17.x86_64 #1
>                              SMP Mon May 7 17:29:34 UTC 2012 x86_64 x86_64
>Alert Count                   5
>First Seen                    2012å¹´05æ16æ¥ 14æ19å44ç§
>Last Seen                     2012å¹´05æ16æ¥ 14æ19å44ç§
>Local ID                      e92d0104-07f2-4da6-9e18-ea99c450ea41
>
>Raw Audit Messages
>type=AVC msg=audit(1337145584.895:962): avc:  denied  { rmdir } for  pid=26007 comm="totem-plugin-vi" name="7627299e856060b7a1cf3345db62a833" dev="dm-2" ino=2102207 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=dir
>
>
>type=SYSCALL msg=audit(1337145584.895:962): arch=x86_64 syscall=rmdir success=no exit=EACCES a0=7fffdacd8360 a1=7fffdacd8360 a2=15 a3=5 items=0 ppid=1 pid=26007 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=3 comm=totem-plugin-vi exe=/usr/libexec/totem-plugin-viewer subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null)
>
>Hash: totem-plugin-vi,mozilla_plugin_t,user_home_t,dir,rmdir
>
>audit2allowunable to open /sys/fs/selinux/policy:  Permission denied
>
>
>audit2allow -Runable to open /sys/fs/selinux/policy:  Permission denied
>
>

Actions: View

Attachments on bug 830634: 590811