Bug 527381
| Summary: | setroubleshoot: SELinux is preventing the /usr/sbin/abrtd from using potentially mislabeled files (/home/matej/.abrt/Bugzilla.conf). | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Matěj Cepl <mcepl> |
| Component: | selinux-policy | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | rawhide | CC: | dwalsh, mcepl, mgrepl |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | setroubleshoot_trace_hash:51b88af4f981a6ed71b284c0c63a9cf4ca4b541492a65cf7adcbf424a115eb7a | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2009-10-06 14:07:55 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
*** This bug has been marked as a duplicate of bug 522878 *** |
The following was filed automatically by setroubleshoot: Souhrn: SELinux is preventing the /usr/sbin/abrtd from using potentially mislabeled files (/home/matej/.abrt/Bugzilla.conf). Podrobný popis: [SELinux is in permissive mode. This access was not denied.] SELinux has denied abrtd access to potentially mislabeled file(s) (/home/matej/.abrt/Bugzilla.conf). This means that SELinux will not allow abrtd to use these files. It is common for users to edit files in their home directory or tmp directories and then move (mv) them to system directories. The problem is that the files end up with the wrong file context which confined applications are not allowed to access. Povolení přístupu: If you want abrtd to access this files, you need to relabel them using restorecon -v '/home/matej/.abrt/Bugzilla.conf'. You might want to relabel the entire directory using restorecon -R -v '/home/matej/.abrt'. Další informace: Kontext zdroje system_u:system_r:abrt_t:s0 Kontext cíle unconfined_u:object_r:user_home_t:s0 Objekty cíle /home/matej/.abrt/Bugzilla.conf [ file ] Zdroj abrtd Cesta zdroje /usr/sbin/abrtd Port <Neznámé> Počítač (removed) RPM balíčky zdroje abrt-0.0.9-2.fc12 RPM balíčky cíle RPM politiky selinux-policy-3.6.32-12.fc12 Selinux povolen True Typ politiky targeted MLS povoleno True Vynucovací režim Permissive Název zásuvného modulu home_tmp_bad_labels Název počítače (removed) Platforma Linux (removed) 2.6.31.1-58.fc12.x86_64 #1 SMP Fri Oct 2 16:17:33 EDT 2009 x86_64 x86_64 Počet upozornění 1 Poprvé viděno Út 6. říjen 2009, 09:34:02 CEST Naposledy viděno Út 6. říjen 2009, 09:34:02 CEST Místní ID f6865097-f637-4536-b604-9e4e2626e3fd Čísla řádků Původní zprávy auditu node=(removed) type=AVC msg=audit(1254814442.579:109): avc: denied { write } for pid=1760 comm="abrtd" name="Bugzilla.conf" dev=dm-9 ino=64389 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file node=(removed) type=SYSCALL msg=audit(1254814442.579:109): arch=c000003e syscall=2 success=yes exit=7 a0=1fc6278 a1=241 a2=1b6 a3=0 items=0 ppid=1 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) Hash String generated from selinux-policy-3.6.32-12.fc12,home_tmp_bad_labels,abrtd,abrt_t,user_home_t,file,write audit2allow suggests: #============= abrt_t ============== allow abrt_t user_home_t:file write;