Attachment 594870 Details for Bug 836024 – SELinux warning from SETroubleshoot

SELinux warning from SETroubleshoot

selinux_warn.txt (text/plain), 2.60 KB, created by Massimiliano on 2012-06-27 21:53:12 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Massimiliano

Created: 2012-06-27 21:53:12 UTC

Size: 2.60 KB

patch

obsolete

>SELinux is preventing /usr/bin/gtk-gnash from execute access on the file /home/myuser/.orc/orcexec.Dzk3B9 (deleted).
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If si crede che gtk-gnash dovrebbe avere possibilitaÌ di accesso execute sui orcexec.Dzk3B9 (deleted) file in modo predefinito.
>Then si dovrebbe riportare il problema come bug.
>E' possibile generare un modulo di politica locale per consentire questo accesso.
>Do
>consentire questo accesso per il momento eseguendo:
># grep gtk-gnash /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c
>                              0.c1023
>Target Context                unconfined_u:object_r:gstreamer_home_t:s0
>Target Objects                /home/myuser/.orc/orcexec.Dzk3B9 (deleted) [ file ]
>Source                        gtk-gnash
>Source Path                   /usr/bin/gtk-gnash
>Port                          <Sconosciuto>
>Host                          myhost
>Source RPM Packages           gnash-0.8.10-2.fc17.x86_64
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.10.0-132.fc17.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     myhost
>Platform                      Linux myhost 3.4.3-1.fc17.x86_64 #1 SMP Mon Jun
>                              18 19:53:17 UTC 2012 x86_64 x86_64
>Alert Count                   2
>First Seen                    mer 27 giu 2012 23:16:51 CEST
>Last Seen                     mer 27 giu 2012 23:16:51 CEST
>Local ID                      a42a1f53-8b2a-4fb7-a008-7df30e5f14ce
>
>Raw Audit Messages
>type=AVC msg=audit(1340831811.219:74): avc:  denied  { execute } for  pid=1851 comm="gtk-gnash" path=2F686F6D652F6D617373692F2E6F72632F6F7263657865632E447A6B334239202864656C6574656429 dev="sdb6" ino=401966 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gstreamer_home_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1340831811.219:74): arch=x86_64 syscall=mmap success=no exit=EACCES a0=0 a1=10000 a2=5 a3=1 items=0 ppid=1261 pid=1851 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=2 comm=gtk-gnash exe=/usr/bin/gtk-gnash subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null)
>
>Hash: gtk-gnash,mozilla_plugin_t,gstreamer_home_t,file,execute
>
>audit2allowunable to open /sys/fs/selinux/policy:  Permission denied
>
>
>audit2allow -Runable to open /sys/fs/selinux/policy:  Permission denied

Actions: View

Attachments on bug 836024: 594870