| Summary: | SELinux is preventing /usr/sbin/lightdm from 'create' accesses on the file .xsession-errors. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Didier Couderc <mogzilla> |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 20 | CC: | dominick.grift, dwalsh, lvrabec, mgrepl |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:dcc373e80447b4d1bbee931a712a946e42c253d4c6d73996b59a6251e0743b9b | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2013-12-19 20:13:36 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
restorecon -R -v /home Should fix your problem. |
Description of problem: simply login into my account SELinux is preventing /usr/sbin/lightdm from 'create' accesses on the file .xsession-errors. ***** Plugin catchall (100. confidence) suggests ************************** If vous pensez que lightdm devrait être autorisé à accéder create sur .xsession-errors file par défaut. Then vous devriez rapporter ceci en tant qu'anomalie. Vous pouvez générer un module de stratégie local pour autoriser cet accès. Do autoriser cet accès pour le moment en exécutant : # grep lightdm /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:xdm_t:s0-s0:c0.c1023 Target Context system_u:object_r:home_root_t:s0 Target Objects .xsession-errors [ file ] Source lightdm Source Path /usr/sbin/lightdm Port <Unknown> Host (removed) Source RPM Packages lightdm-1.8.5-2.fc20.x86_64 Target RPM Packages Policy RPM selinux-policy-3.12.1-106.fc20.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Host Name (removed) Platform Linux (removed) 3.11.10-301.fc20.x86_64 #1 SMP Thu Dec 5 14:01:17 UTC 2013 x86_64 x86_64 Alert Count 1 First Seen 2013-12-19 03:02:37 CET Last Seen 2013-12-19 03:02:37 CET Local ID c0382f2e-0487-40fd-aa7f-6abf439ad354 Raw Audit Messages type=AVC msg=audit(1387418557.74:503): avc: denied { create } for pid=1163 comm="lightdm" name=".xsession-errors" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file type=AVC msg=audit(1387418557.74:503): avc: denied { append open } for pid=1163 comm="lightdm" path="/home/mog/.xsession-errors" dev="sdb3" ino=3670430 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file type=SYSCALL msg=audit(1387418557.74:503): arch=x86_64 syscall=open success=yes exit=ECHILD a0=fd2620 a1=441 a2=180 a3=363d61c310 items=0 ppid=1102 pid=1163 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 ses=1 tty=(none) comm=lightdm exe=/usr/sbin/lightdm subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) Hash: lightdm,xdm_t,home_root_t,file,create Additional info: reporter: libreport-2.1.10 hashmarkername: setroubleshoot kernel: 3.11.10-301.fc20.x86_64 type: libreport