Bug 611016
| Summary: | SELinux is preventing /usr/bin/perl "write" access on zmdc.sock. | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Bart Kus <me> | ||||
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> | ||||
| Status: | CLOSED CANTFIX | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | low | ||||||
| Version: | rawhide | CC: | bosco01, dwalsh, mgrepl | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | i386 | ||||||
| OS: | Linux | ||||||
| Whiteboard: | setroubleshoot_trace_hash:15359d0620a6966a64a521ebb60915fc68e14fb0623a8ddbf6041347bdffa27c | ||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2011-11-21 17:05:48 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
Bart Kus
2010-07-03 05:59:18 UTC
Bart, all these your bugs are caused by zoneminder, which is running as initrc_t domain. It means zoneminder needs policy. You can do the following steps as workaround 1. chcon -t httpd_sys_script_exec_t /usr/libexec/zoneminder/cgi-bin/* 2. setenforce 0 3. run zoneminder 4. setenforce 1 5. add local policy using grep avc /var/log/audit/audit.log | audit2allow -M myzoneminder semodule -i myzoneminder.pp Will fix for now and I will write zoneminder policy. Also please send me your compressed /var/log/audit/audit.log. Thanks. *** Bug 611019 has been marked as a duplicate of this bug. *** *** Bug 611024 has been marked as a duplicate of this bug. *** *** Bug 611025 has been marked as a duplicate of this bug. *** *** Bug 611026 has been marked as a duplicate of this bug. *** *** Bug 611028 has been marked as a duplicate of this bug. *** *** Bug 611030 has been marked as a duplicate of this bug. *** *** Bug 611031 has been marked as a duplicate of this bug. *** *** Bug 611032 has been marked as a duplicate of this bug. *** Created attachment 429561 [details]
Audit log of zoneminder (and possibly other) SELinux events
Providing requested audit.log file.
Thanks for your audit.log. The problem is the zoneminder has a lot of issues so I am moving the bug to F14 and I will re-check the zoneminder. This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component. This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component. This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component. Is this fixed in the current release? Not yet. There were some issues in the zoneminder code which I need to review. I have disabled selinux and still got this error... Fedora release 15 (Lovelock) ==> /var/log/messages <== Aug 14 00:18:27 localhost zmdc[3008]: INF ['zmc -d /dev/video0' starting at 11/08/14 00:18:27, pid = 3197] Aug 14 00:18:27 localhost zmdc[3197]: INF ['zmc -d /dev/video0' started at 11/08/14 00:18:27] Aug 14 00:18:27 localhost zmc_dvideo0[3197]: INF [Debug Level = 0, Debug Log = <none>] Aug 14 00:18:27 localhost zmc_dvideo0[3197]: INF [Starting Capture] Aug 14 00:18:27 localhost zmc_dvideo0[3197]: WAR [Hue control is not suppported] Aug 14 00:18:27 localhost zmc_dvideo0[3197]: WAR [Saturation control is not suppported] Aug 14 00:18:28 localhost zmc_dvideo0[3197]: INF [Got signal 11 (Segmentation fault), crashing] Aug 14 00:18:28 localhost zmc_dvideo0[3197]: ERR [Signal address is 0x10206, no eip] Aug 14 00:18:28 localhost zmc_dvideo0[3197]: ERR [Backtrace: /lib64/libpthread.so.0(+0xeef0) [0x7fc50fa2cef0]] Aug 14 00:18:28 localhost zmc_dvideo0[3197]: ERR [Backtrace: /lib64/libc.so.6(+0x1329bb) [0x7fc50f31d9bb]] Aug 14 00:18:28 localhost zmc_dvideo0[3197]: ERR [Backtrace: /usr/bin/zmc() [0x418541]] Aug 14 00:18:28 localhost zmc_dvideo0[3197]: ERR [Backtrace: /usr/bin/zmc() [0x420157]] Aug 14 00:18:28 localhost zmc_dvideo0[3197]: ERR [Backtrace: /usr/bin/zmc() [0x40545a]] Aug 14 00:18:28 localhost zmc_dvideo0[3197]: ERR [Backtrace: /lib64/libc.so.6(__libc_start_main+0xed) [0x7fc50f20c39d]] Aug 14 00:18:28 localhost zmc_dvideo0[3197]: ERR [Backtrace: /usr/bin/zmc() [0x4057e1]] Aug 14 00:18:28 localhost zmc_dvideo0[3197]: INF [Backtrace complete, please execute the following command for more information] Aug 14 00:18:28 localhost zmc_dvideo0[3197]: INF [addr2line -e /usr/bin/zmc() 0x7fc50fa2cef0 0x7fc50f31d9bb 0x418541 0x420157 0x40545a 0x7fc50f20c39d 0x4057e1] Then open a bug on that package. |