Bug 523040
Summary: | setroubleshoot: SELinux is preventing /usr/sbin/abrtd "read" access on time. | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Antonio A. Olivares <olivares14031> |
Component: | abrt | Assignee: | Jiri Moskovcak <jmoskovc> |
Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | medium | Docs Contact: | |
Priority: | low | ||
Version: | rawhide | CC: | dfediuck, dvlasenk, dwalsh, jkubin, jmoskovc, mgrepl, misc, mnowak, npajkovs, rvokal |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | i386 | ||
OS: | Linux | ||
Whiteboard: | setroubleshoot_trace_hash:117a9644da05680f0704bcc4187a7b1bce95d88aeb362f3a6b768e68932dcc18 | ||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2009-10-19 13:46:19 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Antonio A. Olivares
2009-09-13 16:01:28 UTC
What file named time is abrt trying to read under /var? Is this file under /var/cache/abrt? this seems quite similar to what i see in my log : # grep 1255903177.653:14824 /var/log/audit/audit.log type=AVC msg=audit(1255903177.653:14824): avc: denied { read } for pid=1548 comm="abrtd" path="/var/cache/abrt/kerneloops-1254406517-13/time" dev=dm-1 ino=271119 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file type=SYSCALL msg=audit(1255903177.653:14824): arch=40000003 syscall=3 success=yes exit=0 a0=8 a1=9c64178 a2=1fff a3=bfd428dc items=0 ppid=1 pid=1548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) so yes, the file is under /var/cache/abrt/ , in /var/cache/abrt/kerneloops-1254406517-13/time to be exact. here is the selinux context, if this help : # ls -lZ /var/cache/abrt/kerneloops-1254406517-13/time -rw-r--r--. root root system_u:object_r:var_t:s0 /var/cache/abrt/kerneloops-1254406517-13/time # ls -lZd /var/cache/abrt/kerneloops-1254406517-13 drwx------. root root system_u:object_r:var_t:s0 /var/cache/abrt/kerneloops-1254406517-13 # ls -lZd /var/cache/abrt drwxrwxrwt. root root system_u:object_r:abrt_var_cache_t:s0 /var/cache/abrt the file only contains the time of the crash, in second since epoch. I the label is correct now. And abrt can read te file. You had a labelling problem that as now been fixed. I am closing this bug as notabug, reopen if this happens again. |