Bug 1487958
| Summary: | SELinux is preventing lircd from 'execute' accesses on the file /usr/bin/bash. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Eric COUTURIER-GUILLAUME <eric> |
| Component: | selinux-policy | Assignee: | Lukas Vrabec <lvrabec> |
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 26 | CC: | dwalsh, lsm5, lvrabec, mgrepl, plautrba, pmoore |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:e8b7544126345db8851c20486bdbe389f92e0902eef5d083ec943e3f4a232d8a;VARIANT_ID=workstation; | ||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2017-11-16 12:04:12 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
*** This bug has been marked as a duplicate of bug 1512787 *** |
Description of problem: After lircd start, i launch irw and i get this alert SELinux is preventing lircd from 'execute' accesses on the file /usr/bin/bash. ***** Plugin catchall (100. confidence) suggests ************************** If vous pensez que lircd devrait être autorisé à accéder execute sur bash file par défaut. Then vous devriez rapporter ceci en tant qu'anomalie. Vous pouvez générer un module de stratégie local pour autoriser cet accès. Do allow this access for now by executing: # ausearch -c 'lircd' --raw | audit2allow -M my-lircd # semodule -X 300 -i my-lircd.pp Additional Information: Source Context system_u:system_r:lircd_t:s0 Target Context system_u:object_r:shell_exec_t:s0 Target Objects /usr/bin/bash [ file ] Source lircd Source Path lircd Port <Inconnu> Host (removed) Source RPM Packages Target RPM Packages bash-4.4.12-7.fc26.x86_64 Policy RPM selinux-policy-3.13.1-260.6.fc26.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 4.12.9-300.fc26.x86_64+debug #1 SMP Fri Aug 25 12:50:13 UTC 2017 x86_64 x86_64 Alert Count 1 First Seen 2017-09-03 21:59:23 CEST Last Seen 2017-09-03 21:59:23 CEST Local ID a7148b03-d6fc-4ccd-83d2-3286b4f71c03 Raw Audit Messages type=AVC msg=audit(1504468763.156:661): avc: denied { execute } for pid=23000 comm="lircd" name="bash" dev="dm-0" ino=788308 scontext=system_u:system_r:lircd_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=0 Hash: lircd,lircd_t,shell_exec_t,file,execute Version-Release number of selected component: selinux-policy-3.13.1-260.6.fc26.noarch Additional info: component: selinux-policy reporter: libreport-2.9.1 hashmarkername: setroubleshoot kernel: 4.12.9-300.fc26.x86_64+debug type: libreport