Attachment 901397 Details for Bug 1095851 – SELinux troubleshooter report 4 - execute

SELinux troubleshooter report 4 - execute

selinux.txt (text/plain), 2.68 KB, created by Msquared on 2014-06-02 10:26:22 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Msquared

Created: 2014-06-02 10:26:22 UTC

Size: 2.68 KB

patch

obsolete

>SELinux is preventing /usr/local/Brother/Printer/HL2270DW/inf/brprintconflsr3 from execute access on the file .
>
>*****  Plugin catchall (100. confidence) suggests   **************************
>
>If you believe that brprintconflsr3 should be allowed execute access on the  file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep brprintconflsr3 /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:cupsd_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:cupsd_rw_etc_t:s0
>Target Objects                 [ file ]
>Source                        brprintconflsr3
>Source Path                   /usr/local/Brother/Printer/HL2270DW/inf/brprintcon
>                              flsr3
>Port                          <Unknown>
>Host                          elitebook.home.msquared.com.au
>Source RPM Packages           hl2270dwlpr-2.1.0-1.i386
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.12.1-166.fc20.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Permissive
>Host Name                     elitebook.home.msquared.com.au
>Platform                      Linux elitebook.home.msquared.com.au
>                              3.14.4-200.fc20.x86_64 #1 SMP Tue May 13 13:51:08
>                              UTC 2014 x86_64 x86_64
>Alert Count                   1
>First Seen                    2014-06-02 18:21:47 WST
>Last Seen                     2014-06-02 18:21:47 WST
>Local ID                      fb3b0b1d-56e2-4c54-85c5-3e46cb6ba271
>
>Raw Audit Messages
>type=AVC msg=audit(1401704507.19:423): avc:  denied  { execute } for  pid=3974 comm="sh" name="brprintconflsr3" dev="dm-2" ino=529799 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:cupsd_rw_etc_t:s0 tclass=file
>
>
>type=AVC msg=audit(1401704507.19:423): avc:  denied  { execute_no_trans } for  pid=3974 comm="sh" path="/usr/local/Brother/Printer/HL2270DW/inf/brprintconflsr3" dev="dm-2" ino=529799 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:cupsd_rw_etc_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1401704507.19:423): arch=x86_64 syscall=execve per=400000 success=yes exit=0 a0=2627020 a1=2627310 a2=26258e0 a3=8 items=0 ppid=3973 pid=3974 auid=4294967295 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) ses=4294967295 comm=brprintconflsr3 exe=/usr/local/Brother/Printer/HL2270DW/inf/brprintconflsr3 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>
>Hash: brprintconflsr3,cupsd_t,cupsd_rw_etc_t,file,execute
>

Actions: View

Attachments on bug 1095851: 894354 | 894355 | 894356 | 901397