Attachment 652150 Details for Bug 880337 – File: description

File: description

description (text/plain), 2.18 KB, created by Nicolas Mailhot on 2012-11-26 18:16:34 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Nicolas Mailhot

Created: 2012-11-26 18:16:34 UTC

Size: 2.18 KB

patch

obsolete

>SELinux is preventing rngd from 'write' accesses on the file write_wakeup_threshold.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If vous pensez que rngd devrait Ãªtre autorisÃ© Ã  accÃ©der write sur write_wakeup_threshold file par dÃ©faut.
>Then vous devriez rapporter ceci en tant qu'anomalie.
>Vous pouvez gÃ©nÃ©rer un module de stratÃ©gie local pour autoriser cet accÃ¨s.
>Do
>autoriser cet accÃ¨s pour le moment en exÃ©cutantÂ :
># grep rngd /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:rngd_t:s0
>Target Context                system_u:object_r:sysctl_kernel_t:s0
>Target Objects                write_wakeup_threshold [ file ]
>Source                        rngd
>Source Path                   rngd
>Port                          <Inconnu>
>Host                          (removed)
>Source RPM Packages           rng-tools-4-2.fc19.x86_64
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.11.1-55.fc18.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.7.0-0.rc6.git4.1.fc19.x86_64 #1
>                              SMP Sun Nov 25 00:47:32 UTC 2012 x86_64 x86_64
>Alert Count                   2
>First Seen                    2012-11-21 07:43:07 CET
>Last Seen                     2012-11-25 10:03:44 CET
>Local ID                      f964c7d2-3cf7-4862-aa0d-f59ff5ee758b
>
>Raw Audit Messages
>type=AVC msg=audit(1353834224.643:19): avc:  denied  { write } for  pid=627 comm="rngd" name="write_wakeup_threshold" dev="proc" ino=14159 scontext=system_u:system_r:rngd_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1353834224.643:19): arch=x86_64 syscall=open success=yes exit=EINTR a0=403820 a1=241 a2=1b6 a3=20d31 items=0 ppid=1 pid=627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm=rngd exe=/usr/sbin/rngd subj=system_u:system_r:rngd_t:s0 key=(null)
>
>Hash: rngd,rngd_t,sysctl_kernel_t,file,write
>
>audit2allow
>audit2allow -R

Actions: View

Attachments on bug 880337: 652150