Attachment 894354 Details for Bug 1095851 – SELinux troubleshooter report 1 - rename

SELinux troubleshooter report 1 - rename

info1 - rename.txt (text/plain), 2.87 KB, created by Msquared on 2014-05-11 00:12:45 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Msquared

Created: 2014-05-11 00:12:45 UTC

Size: 2.87 KB

patch

obsolete

>SELinux is preventing /usr/local/Brother/Printer/HL2270DW/inf/brprintconflsr3 from rename access on the file .
>
>*****  Plugin catchall_labels (83.8 confidence) suggests   *******************
>
>If you want to allow brprintconflsr3 to have rename access on the  file
>Then you need to change the label on $FIX_TARGET_PATH
>Do
># semanage fcontext -a -t FILE_TYPE '$FIX_TARGET_PATH'
>where FILE_TYPE is one of the following: cupsd_interface_t, cupsd_lock_t, cupsd_log_t, cupsd_rw_etc_t, cupsd_tmp_t, cupsd_var_lib_t, cupsd_var_run_t, krb5_host_rcache_t, print_spool_t. 
>Then execute: 
>restorecon -v '$FIX_TARGET_PATH'
>
>
>*****  Plugin catchall (17.1 confidence) suggests   **************************
>
>If you believe that brprintconflsr3 should be allowed rename access on the  file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep brprintconflsr3 /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:cupsd_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:usr_t:s0
>Target Objects                 [ file ]
>Source                        brprintconflsr3
>Source Path                   /usr/local/Brother/Printer/HL2270DW/inf/brprintcon
>                              flsr3
>Port                          <Unknown>
>Host                          elitebook.home.msquared.com.au
>Source RPM Packages           hl2270dwlpr-2.1.0-1.i386
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.12.1-158.fc20.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Permissive
>Host Name                     elitebook.home.msquared.com.au
>Platform                      Linux elitebook.home.msquared.com.au
>                              3.14.2-200.fc20.x86_64 #1 SMP Mon Apr 28 14:40:57
>                              UTC 2014 x86_64 x86_64
>Alert Count                   2
>First Seen                    2014-05-11 07:58:44 WST
>Last Seen                     2014-05-11 08:07:19 WST
>Local ID                      34237f42-4fd9-4031-aae2-adc75e835b22
>
>Raw Audit Messages
>type=AVC msg=audit(1399766839.70:1033): avc:  denied  { rename } for  pid=18630 comm="brprintconflsr3" name="brHL2270DWrc" dev="dm-2" ino=529797 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1399766839.70:1033): arch=i386 syscall=setitimer per=400000 success=yes exit=0 a0=ffd5c6af a1=ffd5c2ae a2=415bd000 a3=0 items=0 ppid=18629 pid=18630 auid=4294967295 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) ses=4294967295 comm=brprintconflsr3 exe=/usr/local/Brother/Printer/HL2270DW/inf/brprintconflsr3 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>
>Hash: brprintconflsr3,cupsd_t,usr_t,file,rename
>

Actions: View

Attachments on bug 1095851: 894354 | 894355 | 894356 | 901397