Bug 565276

Podsumowanie:

SELinux is preventing /usr/bin/gdb "write" access on /usr/share/glib-2.0/gdb.

Szczegółowy opis:

SELinux denied access requested by gdb. It is not expected that this access is
required by gdb and this access may signal an intrusion attempt. It is also
possible that the specific version or configuration of the application is
causing it to require additional access.

Zezwalanie na dostęp:

You can generate a local policy module to allow this access - see FAQ
(http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug
report.

Dodatkowe informacje:

Kontekst źródłowy          system_u:system_r:xdm_t:s0-s0:c0.c1023
Kontekst docelowy             system_u:object_r:usr_t:s0
Obiekty docelowe              /usr/share/glib-2.0/gdb [ dir ]
Źródło                     gdb
Ścieżka źródłowa         /usr/bin/gdb
Port                          <Nieznane>
Komputer                      (removed)
Źródłowe pakiety RPM       gdb-7.0.1-31.fc12
Docelowe pakiety RPM          glib2-devel-2.22.4-2.fc12
Pakiet RPM polityki           selinux-policy-3.6.32-84.fc12
SELinux jest włączony       True
Typ polityki                  targeted
Tryb wymuszania               Enforcing
Nazwa wtyczki                 catchall
Nazwa komputera               (removed)
Platforma                     Linux (removed) 2.6.31.12-174.2.3.fc12.i686 #1 SMP Mon
                              Jan 18 20:22:46 UTC 2010 i686 athlon
Liczba alarmów               2
Po raz pierwszy               sob, 13 lut 2010, 22:51:18
Po raz ostatni                sob, 13 lut 2010, 22:51:18
Lokalny identyfikator         dd22e667-f48a-47e1-874a-e3928c949f16
Liczba wierszy                

Surowe komunikaty audytu      

node=(removed) type=AVC msg=audit(1266097878.372:150): avc:  denied  { write } for  pid=7251 comm="gdb" name="gdb" dev=dm-0 ino=98567 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=dir

node=(removed) type=SYSCALL msg=audit(1266097878.372:150): arch=40000003 syscall=5 success=no exit=-13 a0=bf8c8fcb a1=82c1 a2=81ed a3=bf8ca02b items=0 ppid=7250 pid=7251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="gdb" exe="/usr/bin/gdb" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)



Hash String generated from  catchall,gdb,xdm_t,usr_t,dir,write
audit2allow suggests:

#============= xdm_t ==============
#!!!! The source type 'xdm_t' can write to a 'dir' of the following types:
# pcscd_var_run_t, var_lock_t, xkb_var_lib_t, xdm_rw_etc_t, root_t, tmp_t, var_t, user_fonts_t, user_tmpfs_t, xdm_spool_t, fonts_cache_t, user_home_dir_t, locale_t, var_auth_t, xserver_tmp_t, tmpfs_t, var_spool_t, user_tmp_t, var_lib_t, var_run_t, auth_cache_t, xdm_tmpfs_t, xserver_log_t, var_log_t, xdm_log_t, pam_var_run_t, xdm_var_lib_t, xdm_var_run_t, xdm_home_t, pam_var_console_t, root_t, nfs_t

allow xdm_t usr_t:dir write;