Bug 1044190

Summary: SELinux is preventing /usr/bin/dbus-daemon from 'execute' accesses on the file /usr/libexec/mission-control-5.
Product: [Fedora] Fedora Reporter: BrollyLSSJ <songokussj>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: dominick.grift, dwalsh, lvrabec, mgrepl, songokussj
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Unspecified   
Whiteboard: abrt_hash:1c51f40067b5392f6cec7d4eba7106f56d2741ffa83231e912f9cf0f53e81ca5
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-06-09 23:08:17 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description BrollyLSSJ 2013-12-17 21:49:07 UTC
Description of problem:
SELinux is preventing /usr/bin/dbus-daemon from 'execute' accesses on the file /usr/libexec/mission-control-5.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that dbus-daemon should be allowed execute access on the mission-control-5 file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep dbus-daemon /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                system_u:system_r:system_dbusd_t:s0-s0:c0.c1023
Target Context                system_u:object_r:telepathy_mission_control_exec_t
                              :s0
Target Objects                /usr/libexec/mission-control-5 [ file ]
Source                        dbus-daemon
Source Path                   /usr/bin/dbus-daemon
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           dbus-1.6.12-1.fc20.i686
Target RPM Packages           telepathy-mission-control-5.16.0-2.fc20.i686
Policy RPM                    selinux-policy-3.12.1-106.fc20.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 3.11.10-301.fc20.i686+PAE #1 SMP
                              Thu Dec 5 14:12:06 UTC 2013 i686 i686
Alert Count                   4
First Seen                    2013-12-17 22:41:37 CET
Last Seen                     2013-12-17 22:43:10 CET
Local ID                      d4f75d24-d370-46fd-813f-43f56c297d22

Raw Audit Messages
type=AVC msg=audit(1387316590.813:561): avc:  denied  { execute } for  pid=3376 comm="dbus-daemon" name="mission-control-5" dev="dm-1" ino=28382 scontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:telepathy_mission_control_exec_t:s0 tclass=file


type=SYSCALL msg=audit(1387316590.813:561): arch=i386 syscall=execve success=no exit=EACCES a0=b8c7ac28 a1=b8c2fc60 a2=b8ce9b38 a3=29 items=0 ppid=3372 pid=3376 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 ses=4294967295 tty=(none) comm=dbus-daemon exe=/usr/bin/dbus-daemon subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 key=(null)

Hash: dbus-daemon,system_dbusd_t,telepathy_mission_control_exec_t,file,execute

Additional info:
reporter:       libreport-2.1.9
hashmarkername: setroubleshoot
kernel:         3.11.10-301.fc20.i686+PAE
type:           libreport

Comment 1 Daniel Walsh 2013-12-19 20:44:02 UTC
Why would the system bus be running telepathy apps?  Did this happen on an update?

Comment 2 Miroslav Grepl 2013-12-19 21:52:32 UTC
Did you do an upgrade? From F19? It looks it went wrong because we see more bugs like this one from you.

Comment 3 BrollyLSSJ 2014-06-09 22:19:10 UTC
Sorry for the late answer. I thought I already answered it. Yes, I did an upgrade either via yum or via fedup from 19 to 20. I think this ticket can be closed as it did not happen for a long time.

Comment 4 Lukas Vrabec 2014-06-09 23:08:17 UTC
I close it.
Please re-open this when similar problems appears.
Thank you.