Attachment 678873 Details for Bug 895610 – AVC1

AVC1

selinux-deja-dup-1.txt (text/plain), 2.45 KB, created by Ruslan Sagitov on 2013-01-15 16:23:51 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ruslan Sagitov

Created: 2013-01-15 16:23:51 UTC

Size: 2.45 KB

patch

obsolete

>SELinux is preventing /usr/bin/gnome-keyring-daemon from read access on the directory /home/user/.local/share/keystore.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If you believe that gnome-keyring-daemon should be allowed read access on the keystore directory by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep ssh-agent /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                staff_u:staff_r:staff_gkeyringd_t:s0-s0:c0.c1023
>Target Context                staff_u:object_r:data_home_t:s0
>Target Objects                /home/user/.local/share/keystore [ dir ]
>Source                        ssh-agent
>Source Path                   /usr/bin/gnome-keyring-daemon
>Port                          <Unknown>
>Host                          
>Source RPM Packages           gnome-keyring-3.4.1-4.fc17.i686
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.10.0-166.fc17.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     
>Platform                      Linux  3.6.11-1.fc17.i686 #1 SMP Mon Dec 17
>                              22:52:59 UTC 2012 i686 i686
>Alert Count                   1
>First Seen                    2013-01-15 19:52:07 MSK
>Last Seen                     2013-01-15 19:52:07 MSK
>Local ID                      fc825962-4836-4007-aba5-9833a11648f7
>
>Raw Audit Messages
>type=AVC msg=audit(1358265127.922:158): avc:  denied  { read } for  pid=2611 comm="ssh-agent" name="keystore" dev="sda5" ino=7865252 scontext=staff_u:staff_r:staff_gkeyringd_t:s0-s0:c0.c1023 tcontext=staff_u:object_r:data_home_t:s0 tclass=dir
>
>
>type=SYSCALL msg=audit(1358265127.922:158): arch=i386 syscall=openat success=yes exit=EEXIST a0=ffffff9c a1=8c39f18 a2=98800 a3=0 items=0 ppid=1 pid=2611 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=2 comm=ssh-agent exe=/usr/bin/gnome-keyring-daemon subj=staff_u:staff_r:staff_gkeyringd_t:s0-s0:c0.c1023 key=(null)
>
>Hash: ssh-agent,staff_gkeyringd_t,data_home_t,dir,read
>
>audit2allow
>
>#============= staff_gkeyringd_t ==============
>allow staff_gkeyringd_t data_home_t:dir read;
>
>audit2allow -R
>
>#============= staff_gkeyringd_t ==============
>allow staff_gkeyringd_t data_home_t:dir read;
>
>

Actions: View

Attachments on bug 895610: 678873 | 678874