Attachment 917981 Details for Bug 1119456 – SETroubleshoot output

SETroubleshoot output

file_1119456.txt (text/plain), 3.70 KB, created by Peter H. Jones on 2014-07-14 20:04:33 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Peter H. Jones

Created: 2014-07-14 20:04:33 UTC

Size: 3.70 KB

patch

obsolete

>SELinux is preventing /usr/sbin/lightdm from write access on the directory .
>
>*****  Plugin file (36.8 confidence) suggests   ******************************
>
>If you think this is caused by a badly mislabeled machine.
>Then you need to fully relabel.
>Do
>touch /.autorelabel; reboot
>
>*****  Plugin file (36.8 confidence) suggests   ******************************
>
>If you think this is caused by a badly mislabeled machine.
>Then you need to fully relabel.
>Do
>touch /.autorelabel; reboot
>
>*****  Plugin catchall_labels (23.2 confidence) suggests   *******************
>
>If you want to allow lightdm to have write access on the  directory
>Then you need to change the label on $FIX_TARGET_PATH
>Do
># semanage fcontext -a -t FILE_TYPE '$FIX_TARGET_PATH'
>where FILE_TYPE is one of the following: admin_home_t, auth_cache_t, auth_home_t, cache_home_t, cgroup_t, config_home_t, data_home_t, dbus_home_t, etc_t, faillog_t, fonts_cache_t, gconf_home_t, gkeyringd_tmp_t, gnome_home_t, gstreamer_home_t, httpd_user_content_t, httpd_user_script_exec_t, icc_data_home_t, init_var_run_t, krb5_host_rcache_t, locale_t, mozilla_plugin_tmpfs_t, pam_var_console_t, pam_var_run_t, root_t, systemd_passwd_var_run_t, telepathy_cache_home_t, telepathy_data_home_t, tmp_t, tmpfs_t, user_fonts_t, user_home_dir_t, user_home_t, user_tmp_t, user_tmpfs_t, usr_t, var_auth_t, var_lib_t, var_lock_t, var_log_t, var_run_t, var_spool_t, var_t, virt_home_t, xdm_home_t, xdm_log_t, xdm_rw_etc_t, xdm_spool_t, xdm_tmp_t, xdm_tmpfs_t, xdm_var_lib_t, xdm_var_run_t, xkb_var_lib_t, xserver_log_t. 
>Then execute: 
>restorecon -v '$FIX_TARGET_PATH'
>
>
>*****  Plugin catchall (5.04 confidence) suggests   **************************
>
>If you believe that lightdm should be allowed write access on the  directory by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep lightdm /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:xdm_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:file_t:s0
>Target Objects                 [ dir ]
>Source                        lightdm
>Source Path                   /usr/sbin/lightdm
>Port                          <Unknown>
>Host                          localhost.localdomain
>Source RPM Packages           lightdm-1.8.8-1.fc20.i686
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.12.1-176.fc20.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     localhost.localdomain
>Platform                      Linux localhost.localdomain
>                              3.11.10-301.fc20.i686+PAE #1 SMP Thu Dec 5
>                              14:12:06 UTC 2013 i686 i686
>Alert Count                   1
>First Seen                    2014-07-14 15:40:32 EDT
>Last Seen                     2014-07-14 15:40:32 EDT
>Local ID                      38d8df3b-2afa-4632-a49c-65882a37185b
>
>Raw Audit Messages
>type=AVC msg=audit(1405366832.824:370): avc:  denied  { write } for  pid=968 comm="lightdm" name="jones" dev="sda8" ino=916949 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
>
>
>type=SYSCALL msg=audit(1405366832.824:370): arch=i386 syscall=open success=no exit=EACCES a0=86d41d0 a1=441 a2=180 a3=86b5d10 items=0 ppid=922 pid=968 auid=3000 uid=3000 gid=3000 euid=3000 suid=3000 fsuid=3000 egid=3000 sgid=3000 fsgid=3000 ses=1 tty=(none) comm=lightdm exe=/usr/sbin/lightdm subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>
>Hash: lightdm,xdm_t,file_t,dir,write

Actions: View

Attachments on bug 1119456: 917981 | 917982