Description of problem:
SELinux is preventing /usr/libexec/abrt-hook-ccpp from 'getattr' accesses on the file /usr/lib64/firefox/plugin-container.
***** Plugin catchall (100. confidence) suggests **************************
If you believe that abrt-hook-ccpp should be allowed getattr access on the plugin-container file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep abrt-hook-ccpp /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp
Additional Information:
Source Context system_u:system_r:abrt_dump_oops_t:s0
Target Context system_u:object_r:mozilla_plugin_exec_t:s0
Target Objects /usr/lib64/firefox/plugin-container [ file ]
Source abrt-hook-ccpp
Source Path /usr/libexec/abrt-hook-ccpp
Port <Unknown>
Host (removed)
Source RPM Packages abrt-addon-coredump-helper-2.6.1-6.fc22.x86_64
Target RPM Packages firefox-41.0.2-2.fc22.x86_64
Policy RPM selinux-policy-3.13.1-128.18.fc22.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name (removed)
Platform Linux (removed) 4.2.3-200.fc22.x86_64 #1 SMP Thu
Oct 8 03:23:55 UTC 2015 x86_64 x86_64
Alert Count 2
First Seen 2015-10-30 11:43:29 CET
Last Seen 2015-10-30 12:02:35 CET
Local ID 6fd5f16b-1f86-4d7f-b851-956974455cf8
Raw Audit Messages
type=AVC msg=audit(1446202955.372:12723): avc: denied { getattr } for pid=26777 comm="abrt-hook-ccpp" path="/usr/lib64/firefox/plugin-container" dev="dm-0" ino=3035958 scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:object_r:mozilla_plugin_exec_t:s0 tclass=file permissive=0
type=SYSCALL msg=audit(1446202955.372:12723): arch=x86_64 syscall=stat success=no exit=EACCES a0=55ca5f95d530 a1=7fffd5ee6d30 a2=7fffd5ee6d30 a3=7aa items=0 ppid=26134 pid=26777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=abrt-hook-ccpp exe=/usr/libexec/abrt-hook-ccpp subj=system_u:system_r:abrt_dump_oops_t:s0 key=(null)
Hash: abrt-hook-ccpp,abrt_dump_oops_t,mozilla_plugin_exec_t,file,getattr
Version-Release number of selected component:
selinux-policy-3.13.1-128.18.fc22.noarch
Additional info:
reporter: libreport-2.6.3
hashmarkername: setroubleshoot
kernel: 4.2.3-200.fc22.x86_64
type: libreport
Description of problem:
Nov 14th 2015 I have updated F22
Eversince then I have had several problems starting/ending applications
Version-Release number of selected component:
selinux-policy-3.13.1-128.18.fc22.noarch
Additional info:
reporter: libreport-2.6.3
hashmarkername: setroubleshoot
kernel: 4.2.5-201.fc22.x86_64
type: libreport
Description of problem: SELinux is preventing /usr/libexec/abrt-hook-ccpp from 'getattr' accesses on the file /usr/lib64/firefox/plugin-container. ***** Plugin catchall (100. confidence) suggests ************************** If you believe that abrt-hook-ccpp should be allowed getattr access on the plugin-container file by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep abrt-hook-ccpp /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:abrt_dump_oops_t:s0 Target Context system_u:object_r:mozilla_plugin_exec_t:s0 Target Objects /usr/lib64/firefox/plugin-container [ file ] Source abrt-hook-ccpp Source Path /usr/libexec/abrt-hook-ccpp Port <Unknown> Host (removed) Source RPM Packages abrt-addon-coredump-helper-2.6.1-6.fc22.x86_64 Target RPM Packages firefox-41.0.2-2.fc22.x86_64 Policy RPM selinux-policy-3.13.1-128.18.fc22.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 4.2.3-200.fc22.x86_64 #1 SMP Thu Oct 8 03:23:55 UTC 2015 x86_64 x86_64 Alert Count 2 First Seen 2015-10-30 11:43:29 CET Last Seen 2015-10-30 12:02:35 CET Local ID 6fd5f16b-1f86-4d7f-b851-956974455cf8 Raw Audit Messages type=AVC msg=audit(1446202955.372:12723): avc: denied { getattr } for pid=26777 comm="abrt-hook-ccpp" path="/usr/lib64/firefox/plugin-container" dev="dm-0" ino=3035958 scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:object_r:mozilla_plugin_exec_t:s0 tclass=file permissive=0 type=SYSCALL msg=audit(1446202955.372:12723): arch=x86_64 syscall=stat success=no exit=EACCES a0=55ca5f95d530 a1=7fffd5ee6d30 a2=7fffd5ee6d30 a3=7aa items=0 ppid=26134 pid=26777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=abrt-hook-ccpp exe=/usr/libexec/abrt-hook-ccpp subj=system_u:system_r:abrt_dump_oops_t:s0 key=(null) Hash: abrt-hook-ccpp,abrt_dump_oops_t,mozilla_plugin_exec_t,file,getattr Version-Release number of selected component: selinux-policy-3.13.1-128.18.fc22.noarch Additional info: reporter: libreport-2.6.3 hashmarkername: setroubleshoot kernel: 4.2.3-200.fc22.x86_64 type: libreport