Attachment 607489 Details for Bug 852403 – selinux denial message

selinux denial message

denial (text/plain), 2.56 KB, created by Jan Sedlák on 2012-08-28 11:55:33 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jan Sedlák

Created: 2012-08-28 11:55:33 UTC

Size: 2.56 KB

patch

obsolete

>SELinux is preventing /usr/lib/polkit-1/polkit-agent-helper-1 from read access on the file system-auth-ac.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If you believe that polkit-agent-helper-1 should be allowed read access on the system-auth-ac file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep polkit-agent-he /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                unconfined_u:unconfined_r:policykit_auth_t:s0-s0:c
>                              0.c1023
>Target Context                system_u:object_r:etc_runtime_t:s0
>Target Objects                system-auth-ac [ file ]
>Source                        polkit-agent-he
>Source Path                   /usr/lib/polkit-1/polkit-agent-helper-1
>Port                          <Unknown>
>Host                          localhost
>Source RPM Packages           polkit-0.107-2.fc18.x86_64
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.11.1-7.fc18.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     localhost
>Platform                      Linux localhost 3.6.0-0.rc2.git2.1.fc18.x86_64 #1
>                              SMP Wed Aug 22 11:54:04 UTC 2012 x86_64 x86_64
>Alert Count                   20
>First Seen                    2012-08-28 07:34:58 EDT
>Last Seen                     2012-08-28 07:44:39 EDT
>Local ID                      a9ab1b20-cd5a-48d6-b63a-2fbf6a4066b7
>
>Raw Audit Messages
>type=AVC msg=audit(1346154279.9:81): avc:  denied  { read } for  pid=1275 comm="polkit-agent-he" name="system-auth-ac" dev="vda3" ino=20524 scontext=unconfined_u:unconfined_r:policykit_auth_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1346154279.9:81): arch=x86_64 syscall=open success=no exit=EACCES a0=8a3980 a1=0 a2=1b6 a3=238 items=0 ppid=797 pid=1275 auid=1000 uid=1000 gid=1000 euid=0 suid=0 fsuid=0 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=1 comm=polkit-agent-he exe=/usr/lib/polkit-1/polkit-agent-helper-1 subj=unconfined_u:unconfined_r:policykit_auth_t:s0-s0:c0.c1023 key=(null)
>
>Hash: polkit-agent-he,policykit_auth_t,etc_runtime_t,file,read
>
>audit2allow
>
>#============= policykit_auth_t ==============
>allow policykit_auth_t etc_runtime_t:file read;
>
>audit2allow -R
>
>#============= policykit_auth_t ==============
>allow policykit_auth_t etc_runtime_t:file read;
>
>

Actions: View

Attachments on bug 852403: 607489