Bug 1054407
| Summary: | SELinux is preventing /usr/libexec/ibus-x11 from 'connectto' accesses on the unix_stream_socket @/tmp/dbus-JIm5Xeevwn. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | valter <mancinivalter> |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED INSUFFICIENT_DATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 19 | CC: | dominick.grift, dwalsh, lvrabec, mgrepl |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | i686 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:0b3e1dd4fca75cb3d20173068ce02d568018b5513327ff637de8752544d54551 | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2014-12-11 16:38:52 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
This looks like ibus-x11 is some kind of X Server? |
Description of problem: su-c "yuminstall recordmydesktop" SELinux is preventing /usr/libexec/ibus-x11 from 'connectto' accesses on the unix_stream_socket @/tmp/dbus-JIm5Xeevwn. ***** Plugin catchall (100. confidence) suggests *************************** If si crede che ibus-x11 dovrebbe avere possibilità di accesso connectto sui dbus-JIm5Xeevwn unix_stream_socket in modo predefinito. Then si dovrebbe riportare il problema come bug. E' possibile generare un modulo di politica locale per consentire questo accesso. Do consentire questo accesso per il momento eseguendo: # grep ibus-x11 /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:xdm_t:s0-s0:c0.c1023 Target Context unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0 :c0.c1023 Target Objects @/tmp/dbus-JIm5Xeevwn [ unix_stream_socket ] Source ibus-x11 Source Path /usr/libexec/ibus-x11 Port <Sconosciuto> Host (removed) Source RPM Packages ibus-1.5.4-2.fc19.i686 Target RPM Packages Policy RPM selinux-policy-3.12.1-74.16.fc19.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 3.12.6-200.fc19.i686.PAE #1 SMP Mon Dec 23 16:58:40 UTC 2013 i686 i686 Alert Count 1 First Seen 2014-01-16 19:19:44 CET Last Seen 2014-01-16 19:19:44 CET Local ID 53170f96-02f6-46c7-a6cd-a1aaaba61da4 Raw Audit Messages type=AVC msg=audit(1389896384.748:546): avc: denied { connectto } for pid=1299 comm="ibus-x11" path=002F746D702F646275732D4A496D3558656576776E scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=unix_stream_socket type=SYSCALL msg=audit(1389896384.748:546): arch=i386 syscall=socketcall success=no exit=EACCES a0=3 a1=bf86f620 a2=4df12000 a3=0 items=0 ppid=1 pid=1299 auid=4294967295 uid=42 gid=42 euid=42 suid=42 fsuid=42 egid=42 sgid=42 fsgid=42 ses=4294967295 tty=(none) comm=ibus-x11 exe=/usr/libexec/ibus-x11 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) Hash: ibus-x11,xdm_t,unconfined_dbusd_t,unix_stream_socket,connectto Additional info: reporter: libreport-2.1.10 hashmarkername: setroubleshoot kernel: 3.12.6-200.fc19.i686.PAE type: libreport