Attachment 655165 Details for Bug 882343 – File: description

File: description

description (text/plain), 2.75 KB, created by Adam Reid on 2012-11-30 17:48:07 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Adam Reid

Created: 2012-11-30 17:48:07 UTC

Size: 2.75 KB

patch

obsolete

>SELinux is preventing /usr/libexec/colord from 'read' accesses on the file /home/areid_admin/.local/share/icc/edid-979507d05ed82e6d00324228c8c9f4cc.icc.
>
>*****  Plugin restorecon (99.5 confidence) suggests  *************************
>
>If you want to fix the label. 
>/home/areid_admin/.local/share/icc/edid-979507d05ed82e6d00324228c8c9f4cc.icc default label should be icc_data_home_t.
>Then you can run restorecon.
>Do
># /sbin/restorecon -v /home/areid_admin/.local/share/icc/edid-979507d05ed82e6d00324228c8c9f4cc.icc
>
>*****  Plugin catchall (1.49 confidence) suggests  ***************************
>
>If you believe that colord should be allowed read access on the edid-979507d05ed82e6d00324228c8c9f4cc.icc file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep gdbus /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:colord_t:s0
>Target Context                unconfined_u:object_r:home_root_t:s0
>Target Objects                /home/areid_admin/.local/share/icc/edid-
>                              979507d05ed82e6d00324228c8c9f4cc.icc [ file ]
>Source                        gdbus
>Source Path                   /usr/libexec/colord
>Port                          <Unknown>
>Host                          (removed)
>Source RPM Packages           colord-0.1.25-1.fc18.x86_64
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.11.1-57.fc18.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.6.7-5.fc18.x86_64 #1 SMP Tue Nov
>                              20 19:40:08 UTC 2012 x86_64 x86_64
>Alert Count                   1
>First Seen                    2012-11-30 12:43:43 EST
>Last Seen                     2012-11-30 12:43:43 EST
>Local ID                      22d1e052-2e57-4733-8c28-26de1d44a7ec
>
>Raw Audit Messages
>type=AVC msg=audit(1354297423.559:526): avc:  denied  { read } for  pid=1540 comm="gdbus" path="/home/areid_admin/.local/share/icc/edid-979507d05ed82e6d00324228c8c9f4cc.icc" dev="sdb5" ino=20316209 scontext=system_u:system_r:colord_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1354297423.559:526): arch=x86_64 syscall=recvmsg success=yes exit=EBUSY a0=9 a1=7fe2da8ffa70 a2=40000000 a3=40 items=0 ppid=1 pid=1540 auid=4294967295 uid=996 gid=995 euid=996 suid=996 fsuid=996 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm=gdbus exe=/usr/libexec/colord subj=system_u:system_r:colord_t:s0 key=(null)
>
>Hash: gdbus,colord_t,home_root_t,file,read
>
>audit2allow
>audit2allow -R

Actions: View

Attachments on bug 882343: 655165