Bug 603357

Summary:

SELinux is preventing /usr/bin/bidentify "read" access on
/root/.barry/backup/243392c5/config.

Detailed Description:

SELinux denied access requested by bidentify. It is not expected that this
access is required by bidentify and this access may signal an intrusion attempt.
It is also possible that the specific version or configuration of the
application is causing it to require additional access.

Allowing Access:

You can generate a local policy module to allow this access - see FAQ
(http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug
report.

Additional Information:

Source Context                system_u:system_r:hald_t:s0
Target Context                unconfined_u:object_r:admin_home_t:s0
Target Objects                /root/.barry/backup/243392c5/config [ file ]
Source                        bidentify
Source Path                   /usr/bin/bidentify
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           barry-0.17-0.1.20100329git.fc12
Target RPM Packages           
Policy RPM                    selinux-policy-3.6.32-116.fc12
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Plugin Name                   catchall
Host Name                     (removed)
Platform                      Linux (removed)
                              2.6.32.12-115.fc12.x86_64 #1 SMP Fri Apr 30
                              19:46:25 UTC 2010 x86_64 x86_64
Alert Count                   3
First Seen                    Sat 12 Jun 2010 07:14:32 AM EDT
Last Seen                     Sat 12 Jun 2010 11:00:43 AM EDT
Local ID                      2b6bff9c-79d3-4bf5-841d-5457606f683e
Line Numbers                  

Raw Audit Messages            

node=(removed) type=AVC msg=audit(1276354843.92:55): avc:  denied  { read } for  pid=5076 comm="bidentify" name="config" dev=dm-0 ino=274625 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file

node=(removed) type=SYSCALL msg=audit(1276354843.92:55): arch=c000003e syscall=2 success=no exit=-13 a0=6d8228 a1=0 a2=1b6 a3=0 items=0 ppid=5075 pid=5076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bidentify" exe="/usr/bin/bidentify" subj=system_u:system_r:hald_t:s0 key=(null)



Hash String generated from  catchall,bidentify,hald_t,admin_home_t,file,read
audit2allow suggests:

#============= hald_t ==============
allow hald_t admin_home_t:file read;