Attachment 603959 Details for Bug 847714 – File: description

File: description

description (text/plain), 2.76 KB, created by Michael S. on 2012-08-13 10:41:53 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Michael S.

Created: 2012-08-13 10:41:53 UTC

Size: 2.76 KB

patch

obsolete

>SELinux is preventing evolution-alarm from 'execmod' accesses on the file /usr/lib/libjavascriptcoregtk-3.0.so.0.13.4.
>
>*****  Plugin allow_execmod (91.4 confidence) suggests  **********************
>
>If you want to allow evolution-alarm to have execmod access on the libjavascriptcoregtk-3.0.so.0.13.4 file
>Then you need to change the label on '/usr/lib/libjavascriptcoregtk-3.0.so.0.13.4'
>Do
># semanage fcontext -a -t textrel_shlib_t '/usr/lib/libjavascriptcoregtk-3.0.so.0.13.4'
># restorecon -v '/usr/lib/libjavascriptcoregtk-3.0.so.0.13.4'
>
>*****  Plugin catchall (9.59 confidence) suggests  ***************************
>
>If you believe that evolution-alarm should be allowed execmod access on the libjavascriptcoregtk-3.0.so.0.13.4 file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep evolution-alarm /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1
>                              023
>Target Context                system_u:object_r:lib_t:s0
>Target Objects                /usr/lib/libjavascriptcoregtk-3.0.so.0.13.4 [ file
>                              ]
>Source                        evolution-alarm
>Source Path                   evolution-alarm
>Port                          <Inconnu>
>Host                          (removed)
>Source RPM Packages           
>Target RPM Packages           webkitgtk3-1.9.5-1.fc18.i686
>Policy RPM                    selinux-policy-3.11.1-5.fc18.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.5.1-1.fc17.i686.PAE #1 SMP Thu
>                              Aug 9 17:50:53 UTC 2012 i686 i686
>Alert Count                   10
>First Seen                    2012-08-13 12:14:22 CEST
>Last Seen                     2012-08-13 12:39:29 CEST
>Local ID                      57c8bb6e-729e-476e-adec-50b613ed7a33
>
>Raw Audit Messages
>type=AVC msg=audit(1344854369.695:133): avc:  denied  { execmod } for  pid=2348 comm="evolution" path="/usr/lib/libjavascriptcoregtk-3.0.so.0.13.4" dev="dm-2" ino=1195400 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lib_t:s0 tclass=file
>
>
>Hash: evolution-alarm,unconfined_t,lib_t,file,execmod
>
>audit2allow
>
>#============= unconfined_t ==============
>#!!!! This avc can be allowed using the boolean 'selinuxuser_execmod'
>
>allow unconfined_t lib_t:file execmod;
>
>audit2allow -R
>
>#============= unconfined_t ==============
>#!!!! This avc can be allowed using the boolean 'selinuxuser_execmod'
>
>allow unconfined_t lib_t:file execmod;
>

Actions: View

Attachments on bug 847714: 603957 | 603958 | 603959