| Summary: | SELinux is preventing /usr/bin/composite from 'unlink' accesses on the file magick9KWK1C. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Javier Villanueva <sivlemx> |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 19 | CC: | dominick.grift, dwalsh, lvrabec, mgrepl |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:68049c1f68f6a61fdb6c3c96dad2c6b10f31dcb2a8ab4f01e6e7be12c8f48967 | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2013-12-06 17:22:27 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
Try to execute $ restorecon -R -v ~/ |
Description of problem: SELinux is preventing /usr/bin/composite from 'unlink' accesses on the file magick9KWK1C. ***** Plugin catchall (100. confidence) suggests *************************** If cree que de manera predeterminada, composite debería permitir acceso unlink sobre magick9KWK1C file. Then debería reportar esto como un error. Puede generar un módulo de política local para permitir este acceso. Do permita el acceso momentáneamente executando: # grep composite /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 Target Context unconfined_u:object_r:user_home_dir_t:s0 Target Objects magick9KWK1C [ file ] Source composite Source Path /usr/bin/composite Port <Desconocido> Host (removed) Source RPM Packages ImageMagick-6.7.8.9-5.fc19.x86_64 Target RPM Packages Policy RPM selinux-policy-3.12.1-74.11.fc19.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Host Name (removed) Platform Linux (removed) 3.11.7-200.fc19.x86_64 #1 SMP Mon Nov 4 14:09:03 UTC 2013 x86_64 x86_64 Alert Count 1 First Seen 2013-11-11 10:02:18 CST Last Seen 2013-11-11 10:02:18 CST Local ID c3f9f6e9-ba6f-4f9c-aee3-269845447255 Raw Audit Messages type=AVC msg=audit(1384185738.260:3851): avc: denied { unlink } for pid=4454 comm="composite" name="magick9KWK1C" dev="dm-2" ino=6042891 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file type=SYSCALL msg=audit(1384185738.260:3851): arch=x86_64 syscall=unlink success=yes exit=0 a0=1efaaa0 a1=c2 a2=180 a3=7 items=0 ppid=4427 pid=4454 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 ses=1 tty=(none) comm=composite exe=/usr/bin/composite subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) Hash: composite,thumb_t,user_home_dir_t,file,unlink Additional info: reporter: libreport-2.1.9 hashmarkername: setroubleshoot kernel: 3.11.7-200.fc19.x86_64 type: libreport Potential duplicate: bug 863727