Attachment 660874 Details for Bug 885713 – sealert output

sealert output

SELinux_OTRS_perl.sealert (text/plain), 2.62 KB, created by Miguel González Laredo on 2012-12-10 13:40:05 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Miguel González Laredo

Created: 2012-12-10 13:40:05 UTC

Size: 2.62 KB

patch

obsolete

>sealert -l 46852b28-2e3d-4cfd-83a5-9c7ce224912b
>
>ResÃºmen:
>
>SELinux is preventing index.pl (httpd_sys_script_t) "read" to <Desconocido>
>(httpd_sys_script_t).
>
>DescripciÃ³n Detallada:
>
>[SELinux is in permissive mode, the operation would have been denied but was
>permitted due to permissive mode.]
>
>SELinux denied access requested by index.pl. It is not expected that this access
>is required by index.pl and this access may signal an intrusion attempt. It is
>also possible that the specific version or configuration of the application is
>causing it to require additional access.
>
>Permitiendo Acceso:
>
>Puede generar un mÃ³dulo de polÃtica local para permitir este acceso - vea el
>FAQ (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) . O puede
>deshabilitar la protecciÃ³n SELinux, lo cual no es recomendable. Por favor, haga
>un informe de error (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) contra
>este paquete.
>
>InformaciÃ³n Adicional:
>
>Contexto Fuente               root:system_r:httpd_sys_script_t
>Contexto Destino              system_u:system_r:httpd_sys_script_t
>Objetos Destino               None [ shm ]
>Source                        index.pl
>Source Path                   /usr/bin/perl
>Port                          <Desconocido>
>Host                          agenda.ugr.es
>Source RPM Packages           perl-5.8.8-38.el5_8
>Target RPM Packages           
>RPM de PolÃticas             selinux-policy-2.4.6-327.el5
>SELinux Activado              True
>Tipo de PolÃtica             targeted
>MLS Activado                  True
>Modo Obediente                Permissive
>Nombre de Plugin              catchall
>Nombre de Equipo              agenda.ugr.es
>Plataforma                    Linux agenda.ugr.es 2.6.18-194.el5 #1 SMP Fri Apr
>                              2 14:58:14 EDT 2010 x86_64 x86_64
>Cantidad de Alertas           171
>First Seen                    Mon Dec  3 09:41:26 2012
>Last Seen                     Mon Dec 10 13:40:27 2012
>Local ID                      46852b28-2e3d-4cfd-83a5-9c7ce224912b
>NÃºmeros de LÃnea            
>
>Mensajes de AuditorÃa Crudos 
>
>host=agenda.ugr.es type=AVC msg=audit(1355143227.135:253715): avc:  denied  { read } for  pid=30829 comm="index.pl" key=44442310 scontext=root:system_r:httpd_sys_script_t:s0 tcontext=system_u:system_r:httpd_sys_script_t:s0 tclass=shm
>
>host=agenda.ugr.es type=SYSCALL msg=audit(1355143227.135:253715): arch=c000003e syscall=30 success=yes exit=-1927503872 a0=2e0008 a1=0 a2=1000 a3=7 items=0 ppid=28927 pid=30829 auid=0 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=23607 comm="index.pl" exe="/usr/bin/perl" subj=root:system_r:httpd_sys_script_t:s0 key=(null)
>

Actions: View

Attachments on bug 885713: 660874