Attachment 658203 Details for Bug 883876 – File: description

File: description

description (text/plain), 2.18 KB, created by Lukas Brabec on 2012-12-05 13:41:02 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Lukas Brabec

Created: 2012-12-05 13:41:02 UTC

Size: 2.18 KB

patch

obsolete

>SELinux is preventing /usr/bin/qemu-kvm from 'getattr' accesses on the filesystem /.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If you believe that qemu-kvm should be allowed getattr access on the  filesystem by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep qemu-kvm /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:svirt_t:s0:c203,c259
>Target Context                system_u:object_r:nfs_t:s0
>Target Objects                / [ filesystem ]
>Source                        qemu-kvm
>Source Path                   /usr/bin/qemu-kvm
>Port                          <Unknown>
>Host                          (removed)
>Source RPM Packages           qemu-system-x86-1.2.0-24.fc18.x86_64
>Target RPM Packages           filesystem-3.1-2.fc18.x86_64
>Policy RPM                    selinux-policy-3.11.1-59.fc18.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Permissive
>Host Name                     (removed)
>Platform                      Linux (removed) 3.6.7-5.fc18.x86_64 #1 SMP Tue Nov
>                              20 19:40:08 UTC 2012 x86_64 x86_64
>Alert Count                   1
>First Seen                    2012-12-05 14:37:20 CET
>Last Seen                     2012-12-05 14:37:20 CET
>Local ID                      2162ecc9-a308-487d-88e7-2e3a3b18556c
>
>Raw Audit Messages
>type=AVC msg=audit(1354714640.721:519): avc:  denied  { getattr } for  pid=14557 comm="qemu-kvm" name="/" dev="0:37" ino=50 scontext=system_u:system_r:svirt_t:s0:c203,c259 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem
>
>
>type=SYSCALL msg=audit(1354714640.721:519): arch=x86_64 syscall=fstatfs success=yes exit=0 a0=d a1=7ffffc5888b0 a2=0 a3=48 items=0 ppid=1 pid=14557 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm=qemu-kvm exe=/usr/bin/qemu-kvm subj=system_u:system_r:svirt_t:s0:c203,c259 key=(null)
>
>Hash: qemu-kvm,svirt_t,nfs_t,filesystem,getattr
>
>audit2allow
>audit2allow -R

Actions: View

Attachments on bug 883876: 658203