Attachment 603267 Details for Bug 847051 – File: description

File: description

description (text/plain), 2.88 KB, created by Flos Lonicerae on 2012-08-09 14:20:56 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Flos Lonicerae

Created: 2012-08-09 14:20:56 UTC

Size: 2.88 KB

patch

obsolete

>SELinux is preventing /sbin/ldconfig from 'write' accesses on the file /tmp/ffiu8yXyj (deleted).
>
>*****  Plugin leaks (86.2 confidence) suggests  ******************************
>
>If æ¨æ³è¦å¿½ç¥ ldconfig å°è¯ write è®¿é® ffiu8yXyj (deleted) fileï¼å ä¸ºæ¨ç¡®å®å®ä¸åºéè¦è¿ä¸ªè®¿é®ã
>Then æ¨åºè¯¥å°è¿ä¸ªé®é¢ä½ä¸º bug æ¥åã 
>æ¨å¯ä»¥åå»ºæ¬å°çç¥æ¨¡åä¸å®¡æ ¸è¿ä¸ªè®¿é®ã
>Do
># grep /sbin/ldconfig /var/log/audit/audit.log | audit2allow -D -M mypol
># semodule -i mypol.pp
>
>*****  Plugin catchall (14.7 confidence) suggests  ***************************
>
>If æ¨ç¡®å®åºé»è®¤åè®¸ ldconfig write è®¿é® ffiu8yXyj (deleted) fileã
>Then æ¨åºè¯¥å°è¿ä¸ªæåµä½ä¸º bug æ¥åã
>æ¨å¯ä»¥çææ¬å°çç¥æ¨¡ååè®¸è¿ä¸ªè®¿é®ã
>Do
>è¯·æ§è¡ä»¥ä¸å½ä»¤æ¤æ¶åè®¸è¿ä¸ªè®¿é®ï¼
># grep ldconfig /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:ldconfig_t:s0
>Target Context                system_u:object_r:initrc_tmp_t:s0
>Target Objects                /tmp/ffiu8yXyj (deleted) [ file ]
>Source                        ldconfig
>Source Path                   /sbin/ldconfig
>Port                          <æªç¥>
>Host                          (removed)
>Source RPM Packages           glibc-2.14.90-24.fc16.7.x86_64
>                              glibc-2.14.90-24.fc16.7.i686
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.10.0-90.fc16.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Permissive
>Host Name                     (removed)
>Platform                      Linux (removed) 3.4.7-1.fc16.x86_64 #1
>                              SMP Mon Jul 30 16:37:23 UTC 2012 x86_64 x86_64
>Alert Count                   9
>First Seen                    2012å¹´08æ09æ¥ ææå 21æ¶23å40ç§
>Last Seen                     2012å¹´08æ09æ¥ ææå 21æ¶37å05ç§
>Local ID                      eefa1511-eb00-4701-ba67-d5b22465e605
>
>Raw Audit Messages
>type=AVC msg=audit(1344519425.778:408): avc:  denied  { write } for  pid=10752 comm="ldconfig" path=2F746D702F66666975387958796A202864656C6574656429 dev="sda7" ino=399458 scontext=system_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:initrc_tmp_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1344519425.778:408): arch=x86_64 syscall=execve success=yes exit=0 a0=1caecd0 a1=1cadf20 a2=1caddb0 a3=18 items=0 ppid=10751 pid=10752 auid=4294967295 uid=991 gid=985 euid=991 suid=991 fsuid=991 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm=ldconfig exe=/sbin/ldconfig subj=system_u:system_r:ldconfig_t:s0 key=(null)
>
>Hash: ldconfig,ldconfig_t,initrc_tmp_t,file,write
>
>audit2allow
>
>#============= ldconfig_t ==============
>allow ldconfig_t initrc_tmp_t:file write;
>
>audit2allow -R
>
>#============= ldconfig_t ==============
>allow ldconfig_t initrc_tmp_t:file write;
>

Actions: View

Attachments on bug 847051: 603267