Attachment 849468 Details for Bug 1052317 – sealert output for sddm avc

sealert output for sddm avc

sealert_sddm (text/plain), 2.14 KB, created by Dan Mossor [danofsatx] on 2014-01-13 15:59:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Dan Mossor [danofsatx]

Created: 2014-01-13 15:59:30 UTC

Size: 2.14 KB

patch

obsolete

>SELinux is preventing /usr/bin/sddm from using the transition access on a process.
> 
>*****  Plugin catchall (100. confidence) suggests   **************************
> 
>If you believe that sddm should be allowed transition access on processes labeled unconfined_t by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep sddm /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
> 
> 
>Additional Information:
>Source Context                system_u:system_r:init_t:s0
>Target Context                unconfined_u:unconfined_r:unconfined_t:s0
>Target Objects                 [ process ]
>Source                        sddm
>Source Path                   /usr/bin/sddm
>Port                          <Unknown>
>Host                          g55
>Source RPM Packages           sddm-0.2.0-0.23.20131125git7a008602.fc21.x86_64
>Target RPM Packages          
>Policy RPM                    selinux-policy-3.13.1-12.fc21.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     g55
>Platform                      Linux g55 3.12.5-301.fc20.x86_64 #1 SMP Fri Dec 13
>                              22:33:23 UTC 2013 x86_64 x86_64
>Alert Count                   38
>First Seen                    2014-01-13 08:21:11 CST
>Last Seen                     2014-01-13 08:55:04 CST
>Local ID                      740c23a9-6d07-4fc0-a10f-0577a695c2e5
> 
>Raw Audit Messages
>type=AVC msg=audit(1389624904.81:936): avc:  denied  { transition } for  pid=2485 comm="sddm" path="/usr/sbin/unix_chkpwd" dev="dm-0" ino=2495219 scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process
> 
> 
>type=SYSCALL msg=audit(1389624904.81:936): arch=x86_64 syscall=execve success=no exit=EACCES a0=7f0addf9738d a1=7fff0772a740 a2=7f0ade19e3c0 a3=7f0aec873330 items=0 ppid=989 pid=2485 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=(none) comm=sddm exe=/usr/bin/sddm subj=system_u:system_r:init_t:s0 key=(null)
> 
>Hash: sddm,init_t,unconfined_t,process,transition

Actions: View

Attachments on bug 1052317: 849467 | 849468 | 849469 | 849470 | 849471