Résumé:
SELinux is preventing /sbin/consoletype access to a leaked packet_socket file
descriptor.
Description détaillée:
[consoletype a un type permissif (consoletype_t). Cet accès n'a pas été
refusé.]
SELinux denied access requested by the consoletype command. It looks like this
is either a leaked descriptor or consoletype output was redirected to a file it
is not allowed to access. Leaks usually can be ignored since SELinux is just
closing the leak and reporting the error. The application does not use the
descriptor, so it will run properly. If this is a redirection, you will not get
output in the packet_socket. You should generate a bugzilla on selinux-policy,
and it will get routed to the appropriate package. You can safely ignore this
avc.
Autoriser l'accès:
You can generate a local policy module to allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385)
Informations complémentaires:
Contexte source system_u:system_r:consoletype_t:s0
Contexte cible system_u:system_r:pppd_t:s0
Objets du contexte packet_socket [ packet_socket ]
source consoletype
Chemin de la source /sbin/consoletype
Port <Inconnu>
Hôte (removed)
Paquetages RPM source initscripts-9.02-1
Paquetages RPM cible
Politique RPM selinux-policy-3.6.32-49.fc12
Selinux activé True
Type de politique targeted
Mode strict Enforcing
Nom du plugin leaks
Nom de l'hôte (removed)
Plateforme Linux (removed) 2.6.31.6-145.fc12.i686 #1 SMP Sat
Nov 21 16:28:23 EST 2009 i686 i686
Compteur d'alertes 8
Première alerte mar. 01 déc. 2009 06:56:09 CET
Dernière alerte mer. 02 déc. 2009 10:26:08 CET
ID local 368043ea-18db-47bf-8035-3a3c24d5bc7b
Numéros des lignes
Messages d'audit bruts
node=(removed) type=AVC msg=audit(1259745968.47:22010): avc: denied { read write } for pid=2035 comm="consoletype" path="socket:[19082]" dev=sockfs ino=19082 scontext=system_u:system_r:consoletype_t:s0 tcontext=system_u:system_r:pppd_t:s0 tclass=packet_socket
node=(removed) type=SYSCALL msg=audit(1259745968.47:22010): arch=40000003 syscall=11 success=yes exit=0 a0=8712400 a1=8712460 a2=870af38 a3=8712460 items=0 ppid=2034 pid=2035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="consoletype" exe="/sbin/consoletype" subj=system_u:system_r:consoletype_t:s0 key=(null)
Hash String generated from selinux-policy-3.6.32-49.fc12,leaks,consoletype,consoletype_t,pppd_t,packet_socket,read,write
audit2allow suggests:
#============= consoletype_t ==============
allow consoletype_t pppd_t:packet_socket { read write };