DescriptionFrancisco de la Peña
2020-11-15 04:47:37 UTC
Description of problem:
SELinux is preventing gdb from using the 'sys_admin' capabilities.
***** Plugin catchall (100. confidence) suggests **************************
Si cree que gdb debería tener la capacidad de sys_admin de forma predeterminada.
Then debería reportar esto como un error.
Puede generar un módulo de política local para permitir este acceso.
Do
permita el acceso temporalmente ejecutando:
# ausearch -c 'gdb' --raw | audit2allow -M mi-gdb
# semodule -X 300 -i mi-gdb.pp
Additional Information:
Source Context system_u:system_r:abrt_t:s0-s0:c0.c1023
Target Context system_u:system_r:abrt_t:s0-s0:c0.c1023
Target Objects Desconocido [ capability ]
Source gdb
Source Path gdb
Port <Desconocido>
Host (removed)
Source RPM Packages
Target RPM Packages
SELinux Policy RPM selinux-policy-targeted-3.14.6-30.fc33.noarch
Local Policy RPM selinux-policy-targeted-3.14.6-30.fc33.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name (removed)
Platform Linux (removed) 5.8.18-300.fc33.x86_64 #1 SMP Mon
Nov 2 19:09:05 UTC 2020 x86_64 x86_64
Alert Count 4
First Seen 2020-11-14 22:46:02 CST
Last Seen 2020-11-14 22:46:02 CST
Local ID 79d5a182-3f6d-4867-90f2-359a769c0953
Raw Audit Messages
type=AVC msg=audit(1605415562.653:694): avc: denied { sys_admin } for pid=154343 comm="gdb" capability=21 scontext=system_u:system_r:abrt_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0-s0:c0.c1023 tclass=capability permissive=0
Hash: gdb,abrt_t,abrt_t,capability,sys_admin
Version-Release number of selected component:
selinux-policy-targeted-3.14.6-30.fc33.noarch
Additional info:
component: selinux-policy
reporter: libreport-2.14.0
hashmarkername: setroubleshoot
kernel: 5.8.18-300.fc33.x86_64
type: libreport
Description of problem: SELinux is preventing gdb from using the 'sys_admin' capabilities. ***** Plugin catchall (100. confidence) suggests ************************** Si cree que gdb debería tener la capacidad de sys_admin de forma predeterminada. Then debería reportar esto como un error. Puede generar un módulo de política local para permitir este acceso. Do permita el acceso temporalmente ejecutando: # ausearch -c 'gdb' --raw | audit2allow -M mi-gdb # semodule -X 300 -i mi-gdb.pp Additional Information: Source Context system_u:system_r:abrt_t:s0-s0:c0.c1023 Target Context system_u:system_r:abrt_t:s0-s0:c0.c1023 Target Objects Desconocido [ capability ] Source gdb Source Path gdb Port <Desconocido> Host (removed) Source RPM Packages Target RPM Packages SELinux Policy RPM selinux-policy-targeted-3.14.6-30.fc33.noarch Local Policy RPM selinux-policy-targeted-3.14.6-30.fc33.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 5.8.18-300.fc33.x86_64 #1 SMP Mon Nov 2 19:09:05 UTC 2020 x86_64 x86_64 Alert Count 4 First Seen 2020-11-14 22:46:02 CST Last Seen 2020-11-14 22:46:02 CST Local ID 79d5a182-3f6d-4867-90f2-359a769c0953 Raw Audit Messages type=AVC msg=audit(1605415562.653:694): avc: denied { sys_admin } for pid=154343 comm="gdb" capability=21 scontext=system_u:system_r:abrt_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0-s0:c0.c1023 tclass=capability permissive=0 Hash: gdb,abrt_t,abrt_t,capability,sys_admin Version-Release number of selected component: selinux-policy-targeted-3.14.6-30.fc33.noarch Additional info: component: selinux-policy reporter: libreport-2.14.0 hashmarkername: setroubleshoot kernel: 5.8.18-300.fc33.x86_64 type: libreport