Attachment 595145 Details for Bug 836387 – File: description

File: description

description (text/plain), 4.03 KB, created by yarstekt on 2012-06-28 21:45:45 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: yarstekt

Created: 2012-06-28 21:45:45 UTC

Size: 4.03 KB

patch

obsolete

>SELinux is preventing /usr/sbin/lxdm-binary from 'write' accesses on the file /home/paco/.xsession-errors.
>
>*****  Plugin restorecon (82.4 confidence) suggests  *************************
>
>If desea arreglar la etiqueta .
>La etiqueta predeterminada de /home/paco/.xsession-errors deberÃa ser xdm_home_t.
>Then puede ejecutar restorecon.
>Do
># /sbin/restorecon -v /home/paco/.xsession-errors
>
>*****  Plugin file (7.05 confidence) suggests  *******************************
>
>If cree que esto es causado por una maquina muy mal etiquetada.
>Then necesita reetiquetar completamente.
>Do
>touch /.autorelabel; reboot
>
>*****  Plugin file (7.05 confidence) suggests  *******************************
>
>If cree que esto es causado por una maquina muy mal etiquetada.
>Then necesita reetiquetar completamente.
>Do
>touch /.autorelabel; reboot
>
>*****  Plugin catchall_labels (4.59 confidence) suggests  ********************
>
>If you want to allow lxdm-binary to have write access on the .xsession-errors file
>Then necesita modificar la etiqueta en /home/paco/.xsession-errors
>Do
># semanage fcontext -a -t FILE_TYPE '/home/paco/.xsession-errors'
>donde FILE_TYPE es uno de los siguientes: faillog_t, proc_afs_t, lastlog_t, xdm_tmp_t, xdm_log_t, gnome_home_type, initrc_var_run_t, etc_runtime_t, pam_var_run_t, xdm_var_lib_t, xdm_var_run_t, pcscd_var_run_t, xkb_var_lib_t, anon_inodefs_t, xdm_rw_etc_t, gconf_home_t, afs_cache_t, puppet_tmp_t, user_tmpfs_type, xdm_home_t, xdm_lock_t, pam_var_console_t, cgroup_t, locale_t, var_auth_t, wtmp_t, sysfs_t, xdm_t, user_fonts_t, user_tmp_t, xserver_tmpfs_t, xauth_home_t, xdm_spool_t, auth_cache_t, fonts_cache_t, xdm_tmpfs_t, user_cron_spool_t, security_t, xserver_log_t, krb5_host_rcache_t, security_t. 
>Luego ejecute: 
>restorecon -v '/home/paco/.xsession-errors'
>
>
>*****  Plugin catchall (1.31 confidence) suggests  ***************************
>
>If cree que de manera predeterminada, lxdm-binary deberÃa permitir acceso write sobre  .xsession-errors file.     
>Then deberÃa reportar esto como un error.
>Puede generar un mÃ³dulo de polÃtica local para permitir este acceso.
>Do
>permita el acceso momentÃ¡neamente executando:
># grep lxdm-binary /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:xdm_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:file_t:s0
>Target Objects                /home/paco/.xsession-errors [ file ]
>Source                        lxdm-binary
>Source Path                   /usr/sbin/lxdm-binary
>Port                          <Desconocido>
>Host                          (removed)
>Source RPM Packages           lxdm-0.4.1-1.fc16.i686
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.10.0-89.fc16.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.4.2-1.fc16.i686 #1
>                              SMP Thu Jun 14 21:13:38 UTC 2012 i686 i686
>Alert Count                   1
>First Seen                    jue 28 jun 2012 23:27:45 CEST
>Last Seen                     jue 28 jun 2012 23:27:45 CEST
>Local ID                      04e3d5e6-ef73-4c9c-84e2-a43709012b87
>
>Raw Audit Messages
>type=AVC msg=audit(1340918865.600:45): avc:  denied  { write } for  pid=916 comm="lxdm-binary" name=".xsession-errors" dev="sda6" ino=130313 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1340918865.600:45): arch=i386 syscall=open success=no exit=EACCES a0=8050c82 a1=241 a2=180 a3=8d5f5b8 items=0 ppid=787 pid=916 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=1 comm=lxdm-binary exe=/usr/sbin/lxdm-binary subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>
>Hash: lxdm-binary,xdm_t,file_t,file,write
>
>audit2allow
>
>#============= xdm_t ==============
>allow xdm_t file_t:file write;
>
>audit2allow -R
>
>#============= xdm_t ==============
>allow xdm_t file_t:file write;
>

Actions: View

Attachments on bug 836387: 595145