Bug 625957

Summary:

SELinux is preventing
/var/lib/boinc/projects/www.rnaworld.de_rnaworld/cmswrapper_0.10_x86_64-pc-linux-gnu
"sigkill" access .

Detailed Description:

[cmswrapper_0.10 has a permissive type (boinc_t). This access was not denied.]

SELinux denied access requested by cmswrapper_0.10. It is not expected that this
access is required by cmswrapper_0.10 and this access may signal an intrusion
attempt. It is also possible that the specific version or configuration of the
application is causing it to require additional access.

Allowing Access:

You can generate a local policy module to allow this access - see FAQ
(http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug
report.

Additional Information:

Source Context                system_u:system_r:boinc_t:s0
Target Context                system_u:system_r:boinc_t:s0
Target Objects                None [ process ]
Source                        cmswrapper_0.10
Source Path                   /var/lib/boinc/projects/www.rnaworld.de_rnaworld/c
                              mswrapper_0.10_x86_64-pc-linux-gnu
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           
Target RPM Packages           
Policy RPM                    selinux-policy-3.7.19-47.fc13
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Plugin Name                   catchall
Host Name                     (removed)
Platform                      Linux (removed)
                              2.6.33.6-147.2.4.fc13.x86_64 #1 SMP Fri Jul 23
                              17:14:44 UTC 2010 x86_64 x86_64
Alert Count                   1
First Seen                    Wed 18 Aug 2010 09:01:40 PM EDT
Last Seen                     Wed 18 Aug 2010 09:01:40 PM EDT
Local ID                      a5dc689d-f7e3-4cbf-a7d9-c9794bd8644c
Line Numbers                  

Raw Audit Messages            

node=(removed) type=AVC msg=audit(1282179700.488:31405): avc:  denied  { sigkill } for  pid=8709 comm="cmswrapper_0.10" scontext=system_u:system_r:boinc_t:s0 tcontext=system_u:system_r:boinc_t:s0 tclass=process

node=(removed) type=SYSCALL msg=audit(1282179700.488:31405): arch=c000003e syscall=62 success=yes exit=0 a0=220e a1=9 a2=41f185559b000000 a3=7fff735140f0 items=0 ppid=25509 pid=8709 auid=0 uid=490 gid=477 euid=490 suid=490 fsuid=490 egid=477 sgid=477 fsgid=477 tty=(none) ses=180 comm="cmswrapper_0.10" exe="/var/lib/boinc/projects/www.rnaworld.de_rnaworld/cmswrapper_0.10_x86_64-pc-linux-gnu" subj=system_u:system_r:boinc_t:s0 key=(null)



Hash String generated from  catchall,cmswrapper_0.10,boinc_t,boinc_t,process,sigkill
audit2allow suggests:

#============= boinc_t ==============
allow boinc_t self:process sigkill;