Bug 1138929
| Summary: | SELinux is preventing /usr/bin/updatedb from 'getattr' accesses on the chr_file . | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | pascal.bombardier |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 20 | CC: | dominick.grift, dwalsh, lvrabec, mgrepl |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:166e9686368a30c484960fccb21feacefcbb03af1546602e7d614a7f3403594c | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2014-09-08 11:17:58 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
*** This bug has been marked as a duplicate of bug 1138928 *** |
Description of problem: SELinux is preventing /usr/bin/updatedb from 'getattr' accesses on the chr_file . ***** Plugin catchall (100. confidence) suggests ************************** If vous pensez que updatedb devrait être autorisé à accéder getattr sur chr_file par défaut. Then vous devriez rapporter ceci en tant qu'anomalie. Vous pouvez générer un module de stratégie local pour autoriser cet accès. Do autoriser cet accès pour le moment en exécutant : # grep updatedb /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:locate_t:s0-s0:c0.c1023 Target Context unconfined_u:object_r:user_home_t:s0 Target Objects [ chr_file ] Source updatedb Source Path /usr/bin/updatedb Port <Unknown> Host (removed) Source RPM Packages mlocate-0.26-4.fc20.x86_64 Target RPM Packages Policy RPM selinux-policy-3.12.1-182.fc20.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 3.15.10-201.fc20.x86_64 #1 SMP Wed Aug 27 21:10:06 UTC 2014 x86_64 x86_64 Alert Count 1 First Seen 2014-09-06 13:43:39 CEST Last Seen 2014-09-06 13:43:39 CEST Local ID 5ee9dc81-85f5-420c-bddc-e83e4e259ca4 Raw Audit Messages type=AVC msg=audit(1410003819.924:481): avc: denied { getattr } for pid=18101 comm="updatedb" path=2F686F6D652F70617363616C2F54C3A96CC3A96368617267656D656E74732F67346C2F626F6F7463642F726F6F7466732F6465762F6D707463746C dev="sda8" ino=34589203 scontext=system_u:system_r:locate_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=chr_file type=SYSCALL msg=audit(1410003819.924:481): arch=x86_64 syscall=lstat success=no exit=EACCES a0=7f020cf1f089 a1=7fffde507e00 a2=7fffde507e00 a3=7f020cf21963 items=0 ppid=18095 pid=18101 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm=updatedb exe=/usr/bin/updatedb subj=system_u:system_r:locate_t:s0-s0:c0.c1023 key=(null) Hash: updatedb,locate_t,user_home_t,chr_file,getattr Additional info: reporter: libreport-2.2.3 hashmarkername: setroubleshoot kernel: 3.15.10-201.fc20.x86_64 type: libreport