Bug 430205
| Summary: | AVC denials: logwatch_t,tmpreaper_t,procmail_t | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Dominick Grift <domg444> |
| Component: | selinux-policy-targeted | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED NOTABUG | QA Contact: | Ben Levenson <benl> |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | rawhide | ||
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2008-01-25 14:52:15 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Whoops solved sorry. I must relabel my filesystem. the context are somehow corrupted. restorecon -R -v /var/spool/ should fix. |
Description of problem: With SELinux enforced i do not receive my logwatch reports. There are also other avc denials at 4 O'clock: time->Fri Jan 25 04:10:32 2008 type=SYSCALL msg=audit(1201230632.279:47): arch=40000003 syscall=195 success=yes exit=0 a0=925ad18 a1=920d0c8 a2=6a0ff4 a3=92866cc items=0 ppid=5335 pid=5653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="perl" exe="/usr/bin/perl" subj=system_u:system_r:logwatch_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1201230632.279:47): avc: denied { getattr } for pid=5653 comm="perl" path="/var/spool/mail/dgrift" dev=dm-2 ino=6799970 scontext=system_u:system_r:logwatch_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_gnome_home_t:s0 tclass=file ---- time->Fri Jan 25 04:10:33 2008 type=SYSCALL msg=audit(1201230633.425:48): arch=40000003 syscall=196 success=yes exit=0 a0=9024d90 a1=bf86f4cc a2=6a0ff4 a3=64 items=0 ppid=5730 pid=5731 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1201230633.425:48): avc: denied { getattr } for pid=5731 comm="procmail" path="/var/spool/mail/dgrift" dev=dm-2 ino=6799970 scontext=system_u:system_r:procmail_t:s0 tcontext=unconfined_u:object_r:user_gnome_home_t:s0 tclass=file ---- time->Fri Jan 25 04:10:33 2008 type=SYSCALL msg=audit(1201230633.453:49): arch=40000003 syscall=5 success=yes exit=4 a0=90244f0 a1=8441 a2=1b7 a3=8441 items=0 ppid=5730 pid=5731 auid=4294967295 uid=500 gid=12 euid=500 suid=500 fsuid=500 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1201230633.453:49): avc: denied { append } for pid=5731 comm="procmail" name="dgrift" dev=dm-2 ino=6799970 scontext=system_u:system_r:procmail_t:s0 tcontext=unconfined_u:object_r:user_gnome_home_t:s0 tclass=file ---- time->Fri Jan 25 04:10:33 2008 type=SYSCALL msg=audit(1201230633.454:50): arch=40000003 syscall=221 success=yes exit=0 a0=4 a1=e a2=805d7f8 a3=805d7f8 items=0 ppid=5730 pid=5731 auid=4294967295 uid=500 gid=12 euid=500 suid=500 fsuid=500 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1201230633.454:50): avc: denied { lock } for pid=5731 comm="procmail" path="/var/spool/mail/dgrift" dev=dm-2 ino=6799970 scontext=system_u:system_r:procmail_t:s0 tcontext=unconfined_u:object_r:user_gnome_home_t:s0 tclass=file ---- time->Fri Jan 25 04:12:30 2008 type=SYSCALL msg=audit(1201230750.618:51): arch=40000003 syscall=30 success=yes exit=0 a0=804ac72 a1=bfdb86f0 a2=0 a3=922b148 items=0 ppid=9727 pid=9729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1201230750.618:51): avc: denied { setattr } for pid=9729 comm="tmpwatch" name="dvips" dev=dm-2 ino=6799857 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir Version-Release number of selected component (if applicable): selinux-policy-targeted-3.2.5-18.fc9 How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info: