Bug 2247980
| Summary: | SELinux is preventing mktemp from 'write' accesses on the cartella .esmtp_queue. | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Davide Repetto <red> | ||||||
| Component: | selinux-policy | Assignee: | Zdenek Pytela <zpytela> | ||||||
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
| Severity: | unspecified | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | 39 | CC: | dwalsh, lvrabec, mmalik, nknazeko, omosnacek, pkoncity, red, vmojzis, zpytela | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | x86_64 | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | abrt_hash:71bd92541839112dac14acc1b8f28cec5e9f0fe8c390df51f6ba6d1a5e79ea8a;VARIANT_ID=matecompiz; | ||||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2023-11-06 09:09:57 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
Created attachment 1997205 [details]
File: description
Created attachment 1997206 [details]
File: os_info
*** This bug has been marked as a duplicate of bug 2247977 *** |
Description of problem: This AVC happens spontaneously while doing nothig special on the desktop. SELinux is preventing mktemp from 'write' accesses on the cartella .esmtp_queue. ***** Plugin catchall (100. confidence) suggests ************************** Se ci credi mktemp dovrebbe essere consentito write accesso al .esmtp_queue directory per impostazione predefinita. Then si dovrebbe riportare il problema come bug. E' possibile generare un modulo di politica locale per consentire questo accesso. Do consentire questo accesso per ora eseguendo: # ausearch -c 'mktemp' --raw | audit2allow -M my-$MODULE_NOME # semodule -X 300 -i miei-mktemp.pp Additional Information: Source Context system_u:system_r:system_mail_t:s0 Target Context system_u:object_r:ddclient_var_t:s0 Target Objects .esmtp_queue [ dir ] Source mktemp Source Path mktemp Port <Sconosciuto> Host (removed) Source RPM Packages Target RPM Packages SELinux Policy RPM selinux-policy-targeted-38.29-1.fc39.noarch Local Policy RPM selinux-policy-targeted-38.29-1.fc39.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Host Name (removed) Platform Linux (removed) 6.5.9-300.fc39.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Oct 25 21:39:20 UTC 2023 x86_64 Alert Count 12 First Seen 2023-11-04 20:24:36 CET Last Seen 2023-11-05 09:59:27 CET Local ID ac8b329d-7b2c-457b-a975-52c12a321448 Raw Audit Messages type=AVC msg=audit(1699174767.661:1405): avc: denied { write } for pid=129977 comm="mktemp" name=".esmtp_queue" dev="sde4" ino=18645804 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:ddclient_var_t:s0 tclass=dir permissive=1 Hash: mktemp,system_mail_t,ddclient_var_t,dir,write Version-Release number of selected component: selinux-policy-targeted-38.29-1.fc39.noarch Additional info: reporter: libreport-2.17.11 reason: SELinux is preventing mktemp from 'write' accesses on the cartella .esmtp_queue. package: selinux-policy-targeted-38.29-1.fc39.noarch component: selinux-policy hashmarkername: setroubleshoot type: libreport kernel: 6.5.9-300.fc39.x86_64 comment: This AVC happens spontaneously while doing nothig special on the desktop. component: selinux-policy