Attachment 684252 Details for Bug 902205 – full SEalert

full SEalert

sealert.rhbz902205 (text/plain), 2.46 KB, created by Ralf Corsepius on 2013-01-21 12:33:19 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ralf Corsepius

Created: 2013-01-21 12:33:19 UTC

Size: 2.46 KB

patch

obsolete

>SELinux is preventing /usr/bin/totem-video-thumbnailer from name_bind access on the udp_socket .
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If you believe that totem-video-thumbnailer should be allowed name_bind access on the  udp_socket by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep totem-video-thu /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>
>Additional Information:
>Source Context                unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:hi_reserved_port_t:s0
>Target Objects                 [ udp_socket ]
>Source                        totem-video-thu
>Source Path                   /usr/bin/totem-video-thumbnailer
>Port                          804
>Host                          beck
>Source RPM Packages           totem-3.6.3-1.fc18.x86_64
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.11.1-67.fc18.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     beck
>Platform                      Linux beck 3.7.2-201.fc18.x86_64 #1 SMP Fri Jan 11
>                              22:16:23 UTC 2013 x86_64 x86_64
>Alert Count                   265
>First Seen                    2013-01-10 08:10:24 CET
>Last Seen                     2013-01-21 08:20:07 CET
>Local ID                      4c326cb1-a9f4-42d1-a4d9-3078e22f1e06
>
>Raw Audit Messages
>type=AVC msg=audit(1358752807.293:1360): avc:  denied  { name_bind } for  pid=13348 comm="totem-video-thu" src=804 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=udp_socket
>
>
>type=SYSCALL msg=audit(1358752807.293:1360): arch=x86_64 syscall=bind success=no exit=EACCES a0=4 a1=7fff76244780 a2=10 a3=4560 items=0 ppid=22127 pid=13348 auid=8690 uid=8690 gid=7020 euid=8690 suid=8690 fsuid=8690 egid=7020 sgid=7020 fsgid=7020 ses=2 tty=(none) comm=totem-video-thu exe=/usr/bin/totem-video-thumbnailer subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null)
>
>Hash: totem-video-thu,thumb_t,hi_reserved_port_t,udp_socket,name_bind
>
>audit2allow
>
>#============= thumb_t ==============
>allow thumb_t hi_reserved_port_t:udp_socket name_bind;
>
>audit2allow -R
>
>#============= thumb_t ==============
>allow thumb_t hi_reserved_port_t:udp_socket name_bind;
>
>

Actions: View

Attachments on bug 902205: 684252