Attachment 594486 Details for Bug 835566 – File: description

File: description

description (text/plain), 2.73 KB, created by Chen-Pang He on 2012-06-26 13:44:39 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Chen-Pang He

Created: 2012-06-26 13:44:39 UTC

Size: 2.73 KB

patch

obsolete

>SELinux is preventing /usr/lib64/xulrunner-2/plugin-container from 'read' accesses on the directory /run/media/jdh8/DATA.
>
>*****  Plugin restorecon (99.5 confidence) suggests  *************************
>
>If æ¨å¸æä¿®æ£æ¨ç±¤ã 
>/run/media/jdh8/DATA é è¨æ¨ç±¤æçº var_run_tã
>Then æ¨å¯ä»¥å·è¡ restoreconã
>Do
># /sbin/restorecon -v /run/media/jdh8/DATA
>
>*****  Plugin catchall (1.49 confidence) suggests  ***************************
>
>If æ¨èªçº plugin-container å°±é è¨å¼æææ DATA directory ç read ååæ¬éã
>Then æ¨æå°æ¤åå ±çºé¯èª¤ã
>æ¨å¯ç¢çæ¬æ©æ¿çæ¨¡çµï¼ä»¥åè¨±éé ååã
>Do
>ç¾å¨ééå·è¡ä»¥ä¸æä»¤ä¾åè¨±æ¤ååï¼
># grep pool /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c
>                              0.c1023
>Target Context                system_u:object_r:fusefs_t:s0
>Target Objects                /run/media/jdh8/DATA [ dir ]
>Source                        pool
>Source Path                   /usr/lib64/xulrunner-2/plugin-container
>Port                          <æªç¥>
>Host                          (removed)
>Source RPM Packages           xulrunner-13.0.1-1.fc17.x86_64
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.10.0-132.fc17.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux acer.fedora 3.4.3-1.fc17.x86_64 #1 SMP Mon
>                              Jun 18 19:53:17 UTC 2012 x86_64 x86_64
>Alert Count                   13
>First Seen                    è¥¿å2012å¹´06æ26æ¥ (é±äº) 21æ27å01ç§
>Last Seen                     è¥¿å2012å¹´06æ26æ¥ (é±äº) 21æ30å03ç§
>Local ID                      ce0032be-8b47-46f1-8582-ba4dc8c78774
>
>Raw Audit Messages
>type=AVC msg=audit(1340717403.436:166): avc:  denied  { read } for  pid=5441 comm="pool" name="/" dev="sda7" ino=5 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fusefs_t:s0 tclass=dir
>
>
>type=SYSCALL msg=audit(1340717403.436:166): arch=x86_64 syscall=openat success=no exit=EACCES a0=ffffffffffffff9c a1=7fdfb871b340 a2=90800 a3=0 items=0 ppid=1738 pid=5441 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=1 comm=pool exe=/usr/lib64/xulrunner-2/plugin-container subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null)
>
>Hash: pool,mozilla_plugin_t,fusefs_t,dir,read
>
>audit2allowunable to open /sys/fs/selinux/policy:  Permission denied
>
>
>audit2allow -Runable to open /sys/fs/selinux/policy:  Permission denied
>
>

Actions: View

Attachments on bug 835566: 594486