Attachment 936672 Details for Bug 1140290 – AVC alert details window

AVC alert details window

file_1140290.txt (text/plain), 2.23 KB, created by Peter H. Jones on 2014-09-11 20:38:56 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Peter H. Jones

Created: 2014-09-11 20:38:56 UTC

Size: 2.23 KB

patch

obsolete

>SELinux is preventing lightdm from entrypoint access on the file /etc/X11/xinit/Xsession.
>
>*****  Plugin restorecon (99.5 confidence) suggests   ************************
>
>If vous souhaitez corriger l'Ã©tiquette. 
>L'Ã©tiquette par dÃ©faut de /etc/X11/xinit/Xsession devrait Ãªtre bin_t.
>Then vous pouvez exÃ©cuter restorecon.
>Do
># /sbin/restorecon -v /etc/X11/xinit/Xsession
>
>*****  Plugin catchall (1.49 confidence) suggests   **************************
>
>If vous pensez que lightdm devrait Ãªtre autorisÃ© Ã  accÃ©der entrypoint sur Xsession file par dÃ©faut.
>Then vous devriez rapporter ceci en tant qu'anomalie.
>Vous pouvez gÃ©nÃ©rer un module de stratÃ©gie local pour autoriser cet accÃ¨s.
>Do
>autoriser cet accÃ¨s pour le moment en exÃ©cutant :
># grep lightdm /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                unconfined_u:unconfined_r:unconfined_t:s0
>Target Context                unconfined_u:object_r:net_conf_t:s0
>Target Objects                /etc/X11/xinit/Xsession [ file ]
>Source                        lightdm
>Source Path                   lightdm
>Port                          <Unknown>
>Host                          localhost
>Source RPM Packages           
>Target RPM Packages           xorg-x11-xinit-1.3.2-13.fc21.x86_64
>Policy RPM                    selinux-policy-3.13.1-80.fc21.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Permissive
>Host Name                     localhost
>Platform                      Linux localhost 3.16.2-300.fc21.x86_64 #1 SMP Sat
>                              Sep 6 02:51:08 UTC 2014 x86_64 x86_64
>Alert Count                   1
>First Seen                    2014-09-11 12:16:13 EDT
>Last Seen                     2014-09-11 12:16:13 EDT
>Local ID                      7dd554bf-bfc0-47e3-a674-e63f0b0455d8
>
>Raw Audit Messages
>type=AVC msg=audit(1410452173.56:222): avc:  denied  { entrypoint } for  pid=1176 comm="lightdm" path="/etc/X11/xinit/Xsession" dev="dm-0" ino=146829 scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:net_conf_t:s0 tclass=file permissive=1
>
>
>Hash: lightdm,unconfined_t,net_conf_t,file,entrypoint

Actions: View

Attachments on bug 1140290: 936227 | 936672 | 936699 | 936700