Attachment 637445 Details for Bug 869211 – Details about error

Details about error

file_869211.txt (text/plain), 2.43 KB, created by skatedestroyer on 2012-11-03 09:42:03 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: skatedestroyer

Created: 2012-11-03 09:42:03 UTC

Size: 2.43 KB

patch

obsolete

>SELinux is preventing /usr/bin/python2.7 from getattr access on the file /proc/meminfo.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If cree que de manera predeterminada, python2.7 deberÃa permitir acceso getattr sobre  meminfo file.     
>Then deberÃa reportar esto como un error.
>Puede generar un mÃ³dulo de polÃtica local para permitir este acceso.
>Do
>permita el acceso momentÃ¡neamente executando:
># grep jockey-backend /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:jockey_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:proc_t:s0
>Target Objects                /proc/meminfo [ file ]
>Source                        jockey-backend
>Source Path                   /usr/bin/python2.7
>Port                          <Desconocido>
>Host                          FalconR-F17
>Source RPM Packages           bash-4.2.37-2.fc17.x86_64
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.10.0-156.fc17.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Permissive
>Host Name                     FalconR-F17
>Platform                      Linux FalconR-F17 3.6.2-4.fc17.x86_64 #1 SMP Wed
>                              Oct 17 02:43:21 UTC 2012 x86_64 x86_64
>Alert Count                   2
>First Seen                    2012-11-03 04:37:30 PET
>Last Seen                     2012-11-03 04:37:30 PET
>Local ID                      936e06bc-30eb-4d15-8ba2-00a013faf22b
>
>Raw Audit Messages
>type=AVC msg=audit(1351935450.769:97): avc:  denied  { getattr } for  pid=3843 comm="lsb_release" path="/proc/meminfo" dev="proc" ino=4026532026 scontext=system_u:system_r:jockey_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1351935450.769:97): arch=x86_64 syscall=fstat success=yes exit=0 a0=3 a1=7fff6d7b4960 a2=7fff6d7b4960 a3=0 items=0 ppid=3836 pid=3843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=lsb_release exe=/usr/bin/bash subj=system_u:system_r:jockey_t:s0-s0:c0.c1023 key=(null)
>
>Hash: jockey-backend,jockey_t,proc_t,file,getattr
>
>audit2allow
>
>#============= jockey_t ==============
>allow jockey_t proc_t:file getattr;
>
>audit2allow -R
>
>#============= jockey_t ==============
>allow jockey_t proc_t:file getattr;

Actions: View

Attachments on bug 869211: 631992 | 631993 | 637445