Attachment 595982 Details for Bug 837334 – File: description

File: description

description (text/plain), 2.91 KB, created by bsfmig on 2012-07-03 13:37:34 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: bsfmig

Created: 2012-07-03 13:37:34 UTC

Size: 2.91 KB

patch

obsolete

>SELinux is preventing /usr/sbin/userdel from 'write' accesses on the directory /usr/share/jetty.
>
>*****  Plugin catchall_labels (83.8 confidence) suggests  ********************
>
>If you want to allow userdel to have write access on the jetty directory
>Then æ¨å¿é¡»æ´æ¹ /usr/share/jetty ä¸çæ ç¾
>Do
># semanage fcontext -a -t FILE_TYPE '/usr/share/jetty'
>å¶ä¸ FILE_TYPE æ¯ä»¥ä¸æåµä¹ä¸ï¼default_context_t, httpd_user_content_type, mail_s(removed)l_t, etc_t, tmp_t, config_home_t, var_t, semanage_store_t, httpd_user_script_exec_type, user_home_type, semanage_tmp_t, pcscd_var_run_t, file_context_t, home_root_t, selinux_config_t, user_home_dir_tã
>ç¶åæ§è¡ï¼
>restorecon -v '/usr/share/jetty'
>
>
>*****  Plugin catchall (17.1 confidence) suggests  ***************************
>
>If æ¨ç¡®å®åºé»è®¤åè®¸ userdel write è®¿é® jetty directoryã
>Then æ¨åºè¯¥å°è¿ä¸ªæåµä½ä¸º bug æ¥åã
>æ¨å¯ä»¥çææ¬å°çç¥æ¨¡ååè®¸è¿ä¸ªè®¿é®ã
>Do
>è¯·æ§è¡ä»¥ä¸å½ä»¤æ¤æ¶åè®¸è¿ä¸ªè®¿é®ï¼
># grep userdel /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:useradd_t:s0
>Target Context                system_u:object_r:usr_t:s0
>Target Objects                /usr/share/jetty [ dir ]
>Source                        userdel
>Source Path                   /usr/sbin/userdel
>Port                          <æªç¥>
>Host                          (removed)
>Source RPM Packages           shadow-utils-4.1.4.3-14.fc17.x86_64
>Target RPM Packages           jetty-8.1.2-9.fc17.noarch
>Policy RPM                    selinux-policy-3.10.0-134.fc17.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.4.4-3.fc17.x86_64 #1 SMP Tue Jun 26
>                              20:54:56 UTC 2012 x86_64 x86_64
>Alert Count                   1
>First Seen                    2012å¹´07æ03æ¥ ææäº 21æ¶36å17ç§
>Last Seen                     2012å¹´07æ03æ¥ ææäº 21æ¶36å17ç§
>Local ID                      4ff0acd9-4237-4735-86d9-fe44327a2943
>
>Raw Audit Messages
>type=AVC msg=audit(1341322577.46:117): avc:  denied  { write } for  pid=4503 comm="userdel" name="jetty" dev="sda6" ino=1443630 scontext=system_u:system_r:useradd_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir
>
>
>type=SYSCALL msg=audit(1341322577.46:117): arch=x86_64 syscall=unlink success=no exit=EACCES a0=7f6afe83bed0 a1=7fff6f850e70 a2=7fff6f850e70 a3=7f6afe4a6607 items=0 ppid=1398 pid=4503 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm=userdel exe=/usr/sbin/userdel subj=system_u:system_r:useradd_t:s0 key=(null)
>
>Hash: userdel,useradd_t,usr_t,dir,write
>
>audit2allowunable to open /sys/fs/selinux/policy:  Permission denied
>
>
>audit2allow -Runable to open /sys/fs/selinux/policy:  Permission denied
>
>

Actions: View

Attachments on bug 837334: 595982