Attachment 605546 Details for Bug 829118 – bug report log

bug report log

report.log (text/x-log), 3.33 KB, created by Ladislav Nesnera on 2012-08-19 22:12:16 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ladislav Nesnera

Created: 2012-08-19 22:12:16 UTC

Size: 3.33 KB

patch

obsolete

>executable:     /usr/bin/python2.7
>hashmarkername: setroubleshoot
>kernel:         3.5.2-1.fc17.x86_64
>time:           Mon 20 Aug 2012 12:01:15 AM CEST
>
>description:
>:SELinux is preventing /usr/bin/bash from 'execute_no_trans' accesses on the file /usr/lib/virtualbox/VBoxManage.
>:
>:*****  Plugin restorecon (93.9 confidence) suggests  *************************
>:
>:If you want to fix the label. 
>:/usr/lib/virtualbox/VBoxManage default label should be bin_t.
>:Then you can run restorecon.
>:Do
>:# /sbin/restorecon -v /usr/lib/virtualbox/VBoxManage
>:
>:*****  Plugin leaks (6.10 confidence) suggests  ******************************
>:
>:If you want to ignore bash trying to execute_no_trans access the VBoxManage file, because you believe it should not need this access.
>:Then you should report this as a bug.  
>:You can generate a local policy module to dontaudit this access.
>:Do
>:# grep /usr/bin/bash /var/log/audit/audit.log | audit2allow -D -M mypol
>:# semodule -i mypol.pp
>:
>:*****  Plugin catchall (1.43 confidence) suggests  ***************************
>:
>:If you believe that bash should be allowed execute_no_trans access on the VBoxManage file by default.
>:Then you should report this as a bug.
>:You can generate a local policy module to allow this access.
>:Do
>:allow this access for now by executing:
>:# grep sh /var/log/audit/audit.log | audit2allow -M mypol
>:# semodule -i mypol.pp
>:
>:Additional Information:
>:Source Context                system_u:system_r:boinc_t:s0
>:Target Context                system_u:object_r:textrel_shlib_t:s0
>:Target Objects                /usr/lib/virtualbox/VBoxManage [ file ]
>:Source                        sh
>:Source Path                   /usr/bin/bash
>:Port                          <Unknown>
>:Host                          (removed)
>:Source RPM Packages           bash-4.2.37-2.fc17.x86_64
>:Target RPM Packages           VirtualBox-4.1-4.1.18_78361_fedora17-1.x86_64
>:Policy RPM                    selinux-policy-3.10.0-145.fc17.noarch
>:Selinux Enabled               True
>:Policy Type                   targeted
>:Enforcing Mode                Enforcing
>:Host Name                     (removed)
>:Platform                      Linux (removed) 3.5.2-1.fc17.x86_64 #1 SMP Wed Aug
>:                              15 16:09:27 UTC 2012 x86_64 x86_64
>:Alert Count                   6
>:First Seen                    2012-08-19 09:19:27 CEST
>:Last Seen                     2012-08-19 20:19:44 CEST
>:Local ID                      55d857db-dd80-412c-ad03-5b9b3fc3f263
>:
>:Raw Audit Messages
>:type=AVC msg=audit(1345400384.770:171): avc:  denied  { execute_no_trans } for  pid=16799 comm="sh" path="/usr/lib/virtualbox/VBoxManage" dev="dm-1" ino=262486 scontext=system_u:system_r:boinc_t:s0 tcontext=system_u:object_r:textrel_shlib_t:s0 tclass=file
>:
>:
>:type=SYSCALL msg=audit(1345400384.770:171): arch=x86_64 syscall=execve success=no exit=EACCES a0=cc91b0 a1=cc8510 a2=cc8170 a3=18 items=0 ppid=949 pid=16799 auid=4294967295 uid=995 gid=992 euid=995 suid=995 fsuid=995 egid=992 sgid=992 fsgid=992 tty=(none) ses=4294967295 comm=sh exe=/usr/bin/bash subj=system_u:system_r:boinc_t:s0 key=(null)
>:
>:Hash: sh,boinc_t,textrel_shlib_t,file,execute_no_trans
>:
>:audit2allow
>:
>:#============= boinc_t ==============
>:allow boinc_t textrel_shlib_t:file execute_no_trans;
>:
>:audit2allow -R
>:
>:#============= boinc_t ==============
>:allow boinc_t textrel_shlib_t:file execute_no_trans;
>:
>
>END:
>

Actions: View

Attachments on bug 829118: 605546