Attachment 862092 Details for Bug 1064099 – AVC

AVC

apcupsd-avc.txt (text/plain), 2.47 KB, created by Garry T. Williams on 2014-02-12 02:30:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Garry T. Williams

Created: 2014-02-12 02:30:42 UTC

Size: 2.47 KB

patch

obsolete

>SELinux is preventing /usr/sbin/apcupsd from create access on the file LCK...
>
>*****  Plugin catchall_labels (83.8 confidence) suggests   *******************
>
>If you want to allow apcupsd to have create access on the LCK.. file
>Then you need to change the label on LCK..
>Do
># semanage fcontext -a -t FILE_TYPE 'LCK..'
>where FILE_TYPE is one of the following: apcupsd_lock_t, apcupsd_log_t, apcupsd_power_t, apcupsd_tmp_t, apcupsd_var_run_t, etc_runtime_t, systemd_passwd_var_run_t. 
>Then execute: 
>restorecon -v 'LCK..'
>
>
>*****  Plugin catchall (17.1 confidence) suggests   **************************
>
>If you believe that apcupsd should be allowed create access on the LCK.. file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep apcupsd /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:apcupsd_t:s0
>Target Context                system_u:object_r:etc_t:s0
>Target Objects                LCK.. [ file ]
>Source                        apcupsd
>Source Path                   /usr/sbin/apcupsd
>Port                          <Unknown>
>Host                          vfr
>Source RPM Packages           apcupsd-3.14.10-14.fc20.x86_64
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.12.1-119.fc20.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     vfr
>Platform                      Linux vfr 3.12.10-300.fc20.x86_64 #1 SMP Thu Feb 6
>                              22:11:48 UTC 2014 x86_64 x86_64
>Alert Count                   1
>First Seen                    2014-02-11 21:00:26 EST
>Last Seen                     2014-02-11 21:00:26 EST
>Local ID                      bdfe0e86-c82a-4669-978b-3b63304fb5fe
>
>Raw Audit Messages
>type=AVC msg=audit(1392170426.140:365): avc:  denied  { create } for  pid=6715 comm="apcupsd" name="LCK.." scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1392170426.140:365): arch=x86_64 syscall=open success=no exit=EACCES a0=7fb2ed56e2cc a1=c2 a2=1a4 a3=7fb2e7cc79d0 items=0 ppid=1 pid=6715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm=apcupsd exe=/usr/sbin/apcupsd subj=system_u:system_r:apcupsd_t:s0 key=(null)
>
>Hash: apcupsd,apcupsd_t,etc_t,file,create

Actions: View

Attachments on bug 1064099: 862092