| Summary: | SELinux is preventing bash from 'create' accesses on the file 62. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Michał <e.misiek> |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 24 | CC: | dominick.grift, dwalsh, efsnefs, lvrabec, mgrepl, plautrba |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:548e6731b3df941254f74b117b3a15d11536a65a3335e99dc93b2e6c9ac758af;VARIANT_ID=workstation; | ||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-09-04 10:48:02 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
We have discovered that we need to create a dontaudit rule for this. *** This bug has been marked as a duplicate of bug 1345836 *** *** Bug 1378457 has been marked as a duplicate of this bug. *** |
Description of problem: I don't know what caused problem... I'm using gnome-terminal, zsh and i runned wine and in this moment error popped up SELinux is preventing bash from 'create' accesses on the file 62. ***** Plugin catchall (100. confidence) suggests ************************** If aby bash powinno mieć domyślnie create dostęp do 62 file. Then proszę to zgłosić jako błąd. Można utworzyć lokalny moduł polityki, aby umożliwić ten dostęp. Do allow this access for now by executing: # ausearch -c 'bash' --raw | audit2allow -M my-bash # semodule -X 300 -i my-bash.pp Additional Information: Source Context unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1 023 Target Context unconfined_u:object_r:unconfined_t:s0 Target Objects 62 [ file ] Source bash Source Path bash Port <Unknown> Host (removed) Source RPM Packages Target RPM Packages Policy RPM selinux-policy-3.13.1-191.14.fc24.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 4.7.2-201.fc24.x86_64 #1 SMP Fri Aug 26 15:58:40 UTC 2016 x86_64 x86_64 Alert Count 2 First Seen 2016-09-03 17:30:08 CEST Last Seen 2016-09-03 17:30:08 CEST Local ID 6a399d75-4fe6-40d6-85f4-2bf871be225c Raw Audit Messages type=AVC msg=audit(1472916608.199:281): avc: denied { create } for pid=13269 comm="bash" name="62" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=file permissive=0 Hash: bash,unconfined_t,unconfined_t,file,create Version-Release number of selected component: selinux-policy-3.13.1-191.14.fc24.noarch Additional info: reporter: libreport-2.7.2 hashmarkername: setroubleshoot kernel: 4.7.2-201.fc24.x86_64 type: libreport