Bug 1908122
| Summary: | SELinux is preventing unix_chkpwd from 'getattr' accesses on the souborový systém /proc. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Vít Ondruch <vondruch> |
| Component: | selinux-policy | Assignee: | Zdenek Pytela <zpytela> |
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | rawhide | CC: | dwalsh, grepl.miroslav, lvrabec, mmalik, omosnace, plautrba, vmojzis, zpytela |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:a253ba2092eff29c10bcc36f4d8b77bc2670c271afa51b767f530528a0845323;VARIANT_ID=workstation; | ||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2021-01-04 18:26:11 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
*** This bug has been marked as a duplicate of bug 1892401 *** |
Description of problem: SELinux is preventing unix_chkpwd from 'getattr' accesses on the souborový systém /proc. ***** Plugin catchall (100. confidence) suggests ************************** Pokud jste přesvědčeni, že má unix_chkpwd mít ve výchozím stavu přístup getattr na proc filesystem. Then měli byste tento problém nahlásit jako chybu. Abyste přístup povolili, můžete vygenerovat lokální modul pravidel. Do prozatím tento přístup povolíte příkazy: # ausearch -c 'unix_chkpwd' --raw | audit2allow -M my-unixchkpwd # semodule -X 300 -i my-unixchkpwd.pp Additional Information: Source Context unconfined_u:unconfined_r:chkpwd_t:s0-s0:c0.c1023 Target Context system_u:object_r:proc_t:s0 Target Objects /proc [ filesystem ] Source unix_chkpwd Source Path unix_chkpwd Port <Neznámé> Host (removed) Source RPM Packages Target RPM Packages filesystem-3.14-4.fc34.x86_64 SELinux Policy RPM selinux-policy-targeted-3.14.7-11.fc34.noarch Local Policy RPM selinux-policy-targeted-3.14.7-11.fc34.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 5.9.14-200.fc33.x86_64 #1 SMP Fri Dec 11 14:30:56 UTC 2020 x86_64 x86_64 Alert Count 7 First Seen 2020-12-15 22:01:10 CET Last Seen 2020-12-15 22:03:10 CET Local ID 1c7acd77-06ea-4386-91a2-5f5298acb0fa Raw Audit Messages type=AVC msg=audit(1608066190.430:715): avc: denied { getattr } for pid=3134 comm="unix_chkpwd" name="/" dev="proc" ino=1 scontext=unconfined_u:unconfined_r:chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=filesystem permissive=0 Hash: unix_chkpwd,chkpwd_t,proc_t,filesystem,getattr Version-Release number of selected component: selinux-policy-targeted-3.14.7-11.fc34.noarch Additional info: component: selinux-policy reporter: libreport-2.14.0 hashmarkername: setroubleshoot kernel: 5.9.14-200.fc33.x86_64 type: libreport