Attachment 655235 Details for Bug 882384 – File: description

File: description

description (text/plain), 2.34 KB, created by Nicolas Mailhot on 2012-11-30 20:09:41 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Nicolas Mailhot

Created: 2012-11-30 20:09:41 UTC

Size: 2.34 KB

patch

obsolete

>SELinux is preventing /usr/bin/systemd-tmpfiles from 'setattr' accesses on the directory /var/cache/man.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If vous pensez que systemd-tmpfiles devrait Ãªtre autorisÃ© Ã  accÃ©der setattr sur man directory par dÃ©faut.
>Then vous devriez rapporter ceci en tant qu'anomalie.
>Vous pouvez gÃ©nÃ©rer un module de stratÃ©gie local pour autoriser cet accÃ¨s.
>Do
>autoriser cet accÃ¨s pour le moment en exÃ©cutantÂ :
># grep systemd-tmpfile /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:systemd_tmpfiles_t:s0
>Target Context                system_u:object_r:mandb_cache_t:s0
>Target Objects                /var/cache/man [ dir ]
>Source                        systemd-tmpfile
>Source Path                   /usr/bin/systemd-tmpfiles
>Port                          <Unknown>
>Host                          (removed)
>Source RPM Packages           systemd-196-1.fc19.x86_64
>Target RPM Packages           man-db-2.6.3-2.fc19.x86_64
>Policy RPM                    selinux-policy-3.11.1-57.fc18.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.7.0-0.rc7.git1.1.fc19.x86_64 #1
>                              SMP Tue Nov 27 14:13:42 UTC 2012 x86_64 x86_64
>Alert Count                   1
>First Seen                    2012-11-30 19:36:44 CET
>Last Seen                     2012-11-30 19:36:44 CET
>Local ID                      0860fc86-b8bc-4c2f-b190-1326e932a385
>
>Raw Audit Messages
>type=AVC msg=audit(1354300604.900:17722): avc:  denied  { setattr } for  pid=23587 comm="systemd-tmpfile" name="man" dev="dm-0" ino=2888977 scontext=system_u:system_r:systemd_tmpfiles_t:s0 tcontext=system_u:object_r:mandb_cache_t:s0 tclass=dir
>
>
>type=SYSCALL msg=audit(1354300604.900:17722): arch=x86_64 syscall=utimensat success=no exit=EACCES a0=4 a1=0 a2=7fffa80e0100 a3=0 items=0 ppid=1 pid=23587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm=systemd-tmpfile exe=/usr/bin/systemd-tmpfiles subj=system_u:system_r:systemd_tmpfiles_t:s0 key=(null)
>
>Hash: systemd-tmpfile,systemd_tmpfiles_t,mandb_cache_t,dir,setattr
>
>audit2allow
>audit2allow -R

Actions: View

Attachments on bug 882384: 655235