Attachment 655975 Details for Bug 882638 – File: description

File: description

description (text/plain), 2.27 KB, created by Mikhail on 2012-12-02 12:47:06 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Mikhail

Created: 2012-12-02 12:47:06 UTC

Size: 2.27 KB

patch

obsolete

>SELinux is preventing /usr/bin/chcon from 'mac_admin' accesses on the capability2 .
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If you believe that chcon should be allowed mac_admin access on the  capability2 by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep chcon /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1
>                              023
>Target Context                unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1
>                              023
>Target Objects                 [ capability2 ]
>Source                        chcon
>Source Path                   /usr/bin/chcon
>Port                          <Unknown>
>Host                          (removed)
>Source RPM Packages           coreutils-8.17-6.fc18.i686
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.11.1-57.fc18.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.6.7-5.fc18.i686.PAE #1 SMP Tue
>                              Nov 20 19:53:41 UTC 2012 i686 i686
>Alert Count                   4
>First Seen                    2012-12-02 18:42:25 YEKT
>Last Seen                     2012-12-02 18:43:27 YEKT
>Local ID                      7c4128bc-8411-4e0f-a901-f535cb0545bd
>
>Raw Audit Messages
>type=AVC msg=audit(1354452207.379:38756): avc:  denied  { mac_admin } for  pid=5812 comm="chcon" capability=33  scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2
>
>
>type=SYSCALL msg=audit(1354452207.379:38756): arch=i386 syscall=lsetxattr success=no exit=EINVAL a0=81b4168 a1=4bfd9fb2 a2=81b6318 a3=1c items=0 ppid=5811 pid=5812 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts7 ses=2 comm=chcon exe=/usr/bin/chcon subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>
>Hash: chcon,unconfined_t,unconfined_t,capability2,mac_admin
>
>audit2allow
>audit2allow -R

Actions: View

Attachments on bug 882638: 655975