Bug 558745
| Summary: | SELinux is preventing the python from using potentially mislabeled files (ffixDhcgy). | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | ivan <jugon9002> |
| Component: | selinux-policy | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | medium | Docs Contact: | |
| Priority: | low | ||
| Version: | 12 | CC: | dwalsh, jugon9002, mgrepl |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | i386 | ||
| OS: | Linux | ||
| Whiteboard: | setroubleshoot_trace_hash:656518fa325763750fc1769ec88afcbef2190f6bcf80edf727358634b4231ee9 | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2010-01-26 13:55:05 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
*** This bug has been marked as a duplicate of bug 538428 *** |
Resúmen: SELinux is preventing the python from using potentially mislabeled files (ffixDhcgy). Descripción Detallada: SELinux has denied python access to potentially mislabeled file(s) (ffixDhcgy). This means that SELinux will not allow python to use these files. It is common for users to edit files in their home directory or tmp directories and then move (mv) them to system directories. The problem is that the files end up with the wrong file context which confined applications are not allowed to access. Permitiendo Acceso: If you want python to access this files, you need to relabel them using restorecon -v 'ffixDhcgy'. You might want to relabel the entire directory using restorecon -R -v ''. Información Adicional: Contexto Fuente system_u:system_r:NetworkManager_t:s0 Contexto Destino system_u:object_r:tmp_t:s0 Objetos Destino ffixDhcgy [ file ] Fuente python Dirección de Fuente /usr/bin/python Puerto <Desconocido> Nombre de Equipo (removed) Paquetes RPM Fuentes python-2.6-9.fc11 Paquetes RPM Destinos RPM de Políticas selinux-policy-3.6.12-85.fc11 SELinux Activado True Tipo de Política targeted Modo Obediente Enforcing Nombre de Plugin home_tmp_bad_labels Nombre de Equipo (removed) Plataforma Linux (removed) 2.6.30.8-64.fc11.i586 #1 SMP Fri Sep 25 04:30:19 EDT 2009 i686 i686 Cantidad de Alertas 1 Visto por Primera Vez vie 16 oct 2009 23:21:47 CEST Visto por Última Vez vie 16 oct 2009 23:21:47 CEST ID Local 003300d5-44e9-46d9-8c9e-fc119cea2597 Números de Línea Mensajes de Auditoría Crudos node=(removed) type=AVC msg=audit(1255728107.739:6): avc: denied { create } for pid=1856 comm="python" name="ffixDhcgy" scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file node=(removed) type=SYSCALL msg=audit(1255728107.739:6): arch=40000003 syscall=5 success=no exit=-13 a0=bfe176b0 a1=c2 a2=180 a3=41e6 items=0 ppid=1855 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="python" exe="/usr/bin/python" subj=system_u:system_r:NetworkManager_t:s0 key=(null) Hash String generated from selinux-policy-3.6.12-85.fc11,home_tmp_bad_labels,python,NetworkManager_t,tmp_t,file,create audit2allow suggests: #============= NetworkManager_t ============== allow NetworkManager_t tmp_t:file create;