Bug 302411

Summary: settroubleshoot has flagged this 7 times now. Has requested that I file a bug report. Other than that, I am above my level of expertise
Product: [Fedora] Fedora Reporter: Jon Hamelin <jon_hamelin>
Component: selinux-policyAssignee: Daniel Walsh <dwalsh>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: low    
Version: 7   
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Current Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-01-30 19:19:11 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Jon Hamelin 2007-09-23 23:12:33 UTC
Description of problem:
SELinux is preventing pam_console_app (pam_console_t) "getattr" to / (fs_t).

Version-Release number of selected component (if applicable):


How reproducible:
settroubleshoot has flagged this item 7 times. It has requested that I file a
bug report

Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:
Additional InformationSource
Context:  system_u:system_r:pam_console_t:SystemLow-SystemHighTarget
Context:  system_u:object_r:fs_tTarget Objects:  / [ filesystem ]Affected RPM
Packages:  filesystem-2.4.6-1.fc7 [target]Policy
RPM:  selinux-policy-2.6.4-33.fc7Selinux Enabled:  TruePolicy Type:  targetedMLS
Enabled:  TrueEnforcing Mode:  PermissivePlugin Name:  plugins.catchallHost
Name:  linbox024x64Platform:  Linux linbox024x64 2.6.22.1-41.fc7 #1 SMP Fri Jul
27 18:21:43 EDT 2007 x86_64 x86_64Alert Count:  7First Seen:  Thu 16 Aug 2007
10:54:14 AM PDTLast Seen:  Thu 23 Aug 2007 02:39:04 PM PDTLocal
ID:  f2b0d353-b56d-4256-a762-57b1b503f89aLine Numbers:  Raw Audit Messages :avc:
denied { getattr } for comm="pam_console_app" dev=dm-0 name="/" pid=2596
scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tclass=filesystem
tcontext=system_u:object_r:fs_t:s0

Comment 1 Daniel Walsh 2007-09-24 16:03:36 UTC
Fixed in selinux-policy-2.6.4-44

Comment 2 Daniel Walsh 2008-01-30 19:19:11 UTC
Bulk closing all bugs in Fedora updates in the modified state.  If you bug is
not fixed, please reopen.