Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 903064 Details for
Bug 1105759
SELinux is preventing /usr/bin/crontab access for backintime (read and write)
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
description read
description-backintime-crontab-read (text/plain), 2.28 KB, created by
Raphael Groner
on 2014-06-07 07:40:46 UTC
(
hide
)
Description:
description read
Filename:
MIME Type:
Creator:
Raphael Groner
Created:
2014-06-07 07:40:46 UTC
Size:
2.28 KB
patch
obsolete
>SELinux is preventing /usr/bin/crontab from 'read' accesses on the file . > >***** Plugin catchall (100. confidence) suggests ************************** > >If sie denken, dass es crontab standardmässig erlaubt sein sollte, read Zugriff auf file zu erhalten. >Then sie sollten dies als Fehler melden. >Um diesen Zugriff zu erlauben, können Sie ein lokales Richtlinien-Modul erstellen. >Do >zugriff jetzt erlauben, indem Sie die nachfolgenden Befehle ausführen: ># grep crontab /var/log/audit/audit.log | audit2allow -M mypol ># semodule -i mypol.pp > >Additional Information: >Source Context unconfined_u:unconfined_r:crontab_t:s0-s0:c0.c1023 >Target Context unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1 > 023 >Target Objects [ file ] >Source crontab >Source Path /usr/bin/crontab >Port <Unknown> >Host (removed) >Source RPM Packages cronie-1.4.11-4.fc20.x86_64 >Target RPM Packages >Policy RPM selinux-policy-3.13.1-55.fc20.noarch >Selinux Enabled True >Policy Type targeted >Enforcing Mode Enforcing >Host Name (removed) >Platform Linux (removed) 3.14.5-200.fc20.x86_64 #1 SMP Mon > Jun 2 14:26:34 UTC 2014 x86_64 x86_64 >Alert Count 12 >First Seen 2014-06-07 09:25:51 CEST >Last Seen 2014-06-07 09:27:06 CEST >Local ID 2337416e-4982-4b8d-8c0d-8b550e3233e2 > >Raw Audit Messages >type=AVC msg=audit(1402126026.778:497): avc: denied { read } for pid=2338 comm="crontab" path="/proc/2107/mounts" dev="proc" ino=142754 scontext=unconfined_u:unconfined_r:crontab_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=file > > >type=SYSCALL msg=audit(1402126026.778:497): arch=x86_64 syscall=execve success=yes exit=0 a0=2361ea0 a1=2362180 a2=2360310 a3=7fffd6c27510 items=0 ppid=2336 pid=2338 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm=crontab exe=/usr/bin/crontab subj=unconfined_u:unconfined_r:crontab_t:s0-s0:c0.c1023 key=(null) > >Hash: crontab,crontab_t,unconfined_t,file,read
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 1105759
:
903063
| 903064