Attachment 923048 Details for Bug 1125608 – Troubleshooter window

Troubleshooter window

file_1125608.txt (text/plain), 3.70 KB, created by Peter H. Jones on 2014-08-01 01:47:58 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Peter H. Jones

Created: 2014-08-01 01:47:58 UTC

Size: 3.70 KB

patch

obsolete

>SELinux is preventing /usr/sbin/lightdm from write access on the directory .
>
>*****  Plugin file (36.8 confidence) suggests   ******************************
>
>If you think this is caused by a badly mislabeled machine.
>Then you need to fully relabel.
>Do
>touch /.autorelabel; reboot
>
>*****  Plugin file (36.8 confidence) suggests   ******************************
>
>If you think this is caused by a badly mislabeled machine.
>Then you need to fully relabel.
>Do
>touch /.autorelabel; reboot
>
>*****  Plugin catchall_labels (23.2 confidence) suggests   *******************
>
>If you want to allow lightdm to have write access on the  directory
>Then you need to change the label on $FIX_TARGET_PATH
>Do
># semanage fcontext -a -t FILE_TYPE '$FIX_TARGET_PATH'
>where FILE_TYPE is one of the following: admin_home_t, auth_cache_t, auth_home_t, cache_home_t, cgroup_t, config_home_t, data_home_t, dbus_home_t, etc_t, faillog_t, fonts_cache_t, gconf_home_t, gkeyringd_tmp_t, gnome_home_t, gstreamer_home_t, httpd_user_content_t, httpd_user_script_exec_t, icc_data_home_t, init_var_run_t, krb5_host_rcache_t, locale_t, mozilla_plugin_tmpfs_t, pam_var_console_t, pam_var_run_t, root_t, systemd_passwd_var_run_t, telepathy_cache_home_t, telepathy_data_home_t, tmp_t, tmpfs_t, user_fonts_t, user_home_dir_t, user_home_t, user_tmp_t, user_tmpfs_t, usr_t, var_auth_t, var_lib_t, var_lock_t, var_log_t, var_run_t, var_spool_t, var_t, virt_home_t, xdm_home_t, xdm_log_t, xdm_rw_etc_t, xdm_spool_t, xdm_tmp_t, xdm_tmpfs_t, xdm_var_lib_t, xdm_var_run_t, xkb_var_lib_t, xserver_log_t. 
>Then execute: 
>restorecon -v '$FIX_TARGET_PATH'
>
>
>*****  Plugin catchall (5.04 confidence) suggests   **************************
>
>If you believe that lightdm should be allowed write access on the  directory by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep lightdm /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:xdm_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:file_t:s0
>Target Objects                 [ dir ]
>Source                        lightdm
>Source Path                   /usr/sbin/lightdm
>Port                          <Unknown>
>Host                          localhost.localdomain
>Source RPM Packages           lightdm-1.8.8-1.fc20.i686
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.12.1-177.fc20.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     localhost.localdomain
>Platform                      Linux localhost.localdomain
>                              3.15.6-200.fc20.i686+PAE #1 SMP Fri Jul 18
>                              03:01:10 UTC 2014 i686 i686
>Alert Count                   3
>First Seen                    2014-07-31 08:53:15 EDT
>Last Seen                     2014-07-31 19:12:08 EDT
>Local ID                      5b549249-d75a-41e6-85cb-cd457bd9222b
>
>Raw Audit Messages
>type=AVC msg=audit(1406848328.388:369): avc:  denied  { write } for  pid=1114 comm="lightdm" name="jones" dev="sda8" ino=916949 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
>
>
>type=SYSCALL msg=audit(1406848328.388:369): arch=i386 syscall=open success=no exit=EACCES a0=86e06d8 a1=441 a2=180 a3=86c1d10 items=0 ppid=1104 pid=1114 auid=3000 uid=3000 gid=3000 euid=3000 suid=3000 fsuid=3000 egid=3000 sgid=3000 fsgid=3000 tty=(none) ses=1 comm=lightdm exe=/usr/sbin/lightdm subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>
>Hash: lightdm,xdm_t,file_t,dir,write

Actions: View

Attachments on bug 1125608: 923048