Attachment 598250 Details for Bug 840228 – File: description

File: description

description (text/plain), 2.41 KB, created by xnaskos on 2012-07-14 13:20:00 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: xnaskos

Created: 2012-07-14 13:20:00 UTC

Size: 2.41 KB

patch

obsolete

>SELinux is preventing /usr/bin/zarafa-server from 'unlink' accesses on the sock_file zarafa-prio.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If you believe that zarafa-server should be allowed unlink access on the zarafa-prio sock_file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep zarafa-server /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:zarafa_server_t:s0
>Target Context                unconfined_u:object_r:var_run_t:s0
>Target Objects                zarafa-prio [ sock_file ]
>Source                        zarafa-server
>Source Path                   /usr/bin/zarafa-server
>Port                          <ÎÎ³Î½ÏÏÏÎ¿>
>Host                          (removed)
>Source RPM Packages           zarafa-server-7.0.8-1.fc17.x86_64
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.10.0-137.fc17.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.4.4-5.fc17.x86_64 #1 SMP
>                              Thu Jul 5 20:20:59 UTC 2012 x86_64 x86_64
>Alert Count                   1
>First Seen                    Î£Î±Î² 14 ÎÎ¿ÏÎ» 2012 04:15:33 Î¼Î¼ EEST
>Last Seen                     Î£Î±Î² 14 ÎÎ¿ÏÎ» 2012 04:15:33 Î¼Î¼ EEST
>Local ID                      e89c32f9-4b7a-4822-9f59-c8e969a7c4cd
>
>Raw Audit Messages
>type=AVC msg=audit(1342271733.944:334): avc:  denied  { unlink } for  pid=8838 comm="zarafa-server" name="zarafa-prio" dev="tmpfs" ino=132892 scontext=system_u:system_r:zarafa_server_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=sock_file
>
>
>type=SYSCALL msg=audit(1342271733.944:334): arch=x86_64 syscall=unlink success=no exit=EACCES a0=14a4868 a1=14a487d a2=0 a3=7fff097a5610 items=0 ppid=8837 pid=8838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=zarafa-server exe=/usr/bin/zarafa-server subj=system_u:system_r:zarafa_server_t:s0 key=(null)
>
>Hash: zarafa-server,zarafa_server_t,var_run_t,sock_file,unlink
>
>audit2allowunable to open /sys/fs/selinux/policy:  Permission denied
>
>
>audit2allow -Runable to open /sys/fs/selinux/policy:  Permission denied
>
>

Actions: View

Attachments on bug 840228: 598250