Bug 636864
| Summary: | consolehelper AVCs | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Carl G. <carlg> |
| Component: | selinux-policy-targeted | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED ERRATA | QA Contact: | Ben Levenson <benl> |
| Severity: | medium | Docs Contact: | |
| Priority: | low | ||
| Version: | 14 | ||
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | selinux-policy-3.9.5-7.fc14 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2010-10-05 13:14:27 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Fixed in selinux-policy-3.9.5-4.fc14 selinux-policy-3.9.5-5.fc14 has been submitted as an update for Fedora 14. https://admin.fedoraproject.org/updates/selinux-policy-3.9.5-5.fc14 selinux-policy-3.9.5-5.fc14 has been pushed to the Fedora 14 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update selinux-policy'. You can provide feedback for this update here: https://admin.fedoraproject.org/updates/selinux-policy-3.9.5-5.fc14 selinux-policy-3.9.5-7.fc14 has been submitted as an update for Fedora 14. https://admin.fedoraproject.org/updates/selinux-policy-3.9.5-7.fc14 selinux-policy-3.9.5-7.fc14 has been pushed to the Fedora 14 stable repository. If problems still persist, please make note of it in this bug report. |
type=AVC msg=audit(1285250706.852:29763): avc: denied { read } for pid=2836 comm="consolehelper-g" name=".fonts.conf" dev=dm-4 ino=48238464 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:user_fonts_config_t:s0 tclass=file type=SYSCALL msg=audit(1285250706.852:29763): arch=c000003e syscall=21 success=yes exit=0 a0=23a25f0 a1=4 a2=6 a3=4 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.852:29764): avc: denied { getattr } for pid=2836 comm="consolehelper-g" path="/home/carl/.fonts.conf" dev=dm-4 ino=48238464 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:user_fonts_config_t:s0 tclass=file type=SYSCALL msg=audit(1285250706.852:29764): arch=c000003e syscall=4 success=yes exit=0 a0=23a25f0 a1=7fffe49d4aa0 a2=7fffe49d4aa0 a3=1 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.852:29765): avc: denied { open } for pid=2836 comm="consolehelper-g" name=".fonts.conf" dev=dm-4 ino=48238464 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:user_fonts_config_t:s0 tclass=file type=SYSCALL msg=audit(1285250706.852:29765): arch=c000003e syscall=2 success=yes exit=15 a0=23a25f0 a1=0 a2=0 a3=1 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.859:29766): avc: denied { getattr } for pid=2836 comm="consolehelper-g" path="/usr/share/fonts" dev=dm-1 ino=244 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=system_u:object_r:fonts_t:s0 tclass=dir type=SYSCALL msg=audit(1285250706.859:29766): arch=c000003e syscall=4 success=yes exit=0 a0=2396640 a1=7fffe49d9890 a2=7fffe49d9890 a3=1 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.859:29767): avc: denied { search } for pid=2836 comm="consolehelper-g" name="fontconfig" dev=dm-1 ino=13691 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=system_u:object_r:fonts_cache_t:s0 tclass=dir type=AVC msg=audit(1285250706.859:29767): avc: denied { read } for pid=2836 comm="consolehelper-g" name="3830d5c3ddfd5cd38a049b759396e72e-le64.cache-3" dev=dm-1 ino=6402 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:fonts_cache_t:s0 tclass=file type=AVC msg=audit(1285250706.859:29767): avc: denied { open } for pid=2836 comm="consolehelper-g" name="3830d5c3ddfd5cd38a049b759396e72e-le64.cache-3" dev=dm-1 ino=6402 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:fonts_cache_t:s0 tclass=file type=SYSCALL msg=audit(1285250706.859:29767): arch=c000003e syscall=2 success=yes exit=12 a0=2395e20 a1=0 a2=2395e63 a3=fffffffffffffff0 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.860:29768): avc: denied { getattr } for pid=2836 comm="consolehelper-g" path="/var/cache/fontconfig/3830d5c3ddfd5cd38a049b759396e72e-le64.cache-3" dev=dm-1 ino=6402 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:fonts_cache_t:s0 tclass=file type=SYSCALL msg=audit(1285250706.860:29768): arch=c000003e syscall=5 success=yes exit=0 a0=c a1=7fffe49d9920 a2=7fffe49d9920 a3=fffffffffffffff0 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.860:29769): avc: denied { search } for pid=2836 comm="consolehelper-g" name="fonts" dev=dm-1 ino=8486 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=system_u:object_r:fonts_t:s0 tclass=dir type=SYSCALL msg=audit(1285250706.860:29769): arch=c000003e syscall=4 success=no exit=-2 a0=23966d0 a1=7fffe49d9890 a2=7fffe49d9890 a3=ffffffffffffffff items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.863:29770): avc: denied { read } for pid=2836 comm="consolehelper-g" name="DejaVuSansCondensed.ttf" dev=dm-1 ino=786605 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=system_u:object_r:fonts_t:s0 tclass=file type=AVC msg=audit(1285250706.863:29770): avc: denied { open } for pid=2836 comm="consolehelper-g" name="DejaVuSansCondensed.ttf" dev=dm-1 ino=786605 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=system_u:object_r:fonts_t:s0 tclass=file type=SYSCALL msg=audit(1285250706.863:29770): arch=c000003e syscall=2 success=yes exit=12 a0=2399aa0 a1=0 a2=0 a3=50 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.863:29771): avc: denied { getattr } for pid=2836 comm="consolehelper-g" path="/usr/share/fonts/dejavu/DejaVuSansCondensed.ttf" dev=dm-1 ino=786605 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=system_u:object_r:fonts_t:s0 tclass=file type=SYSCALL msg=audit(1285250706.863:29771): arch=c000003e syscall=5 success=yes exit=0 a0=c a1=7fffe49d99d0 a2=7fffe49d99d0 a3=50 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.866:29772): avc: denied { getattr } for pid=2836 comm="consolehelper-g" path="/home/carl/.local/share/mime/mime.cache" dev=dm-4 ino=12453051 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:gconf_home_t:s0 tclass=file type=SYSCALL msg=audit(1285250706.866:29772): arch=c000003e syscall=4 success=yes exit=0 a0=23cd640 a1=7fffe49d9710 a2=7fffe49d9710 a3=fffffffffffffff0 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.866:29773): avc: denied { read } for pid=2836 comm="consolehelper-g" name="mime.cache" dev=dm-4 ino=12453051 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:gconf_home_t:s0 tclass=file type=AVC msg=audit(1285250706.866:29773): avc: denied { open } for pid=2836 comm="consolehelper-g" name="mime.cache" dev=dm-4 ino=12453051 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:gconf_home_t:s0 tclass=file type=SYSCALL msg=audit(1285250706.866:29773): arch=c000003e syscall=2 success=yes exit=13 a0=23cd640 a1=0 a2=0 a3=696d2f656d696d2f items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.870:29774): avc: denied { getattr } for pid=2836 comm="consolehelper-g" path="/home/carl/.icons/elementary/index.theme" dev=dm-4 ino=8151456 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:user_home_t:s0 tclass=file type=SYSCALL msg=audit(1285250706.870:29774): arch=c000003e syscall=4 success=yes exit=0 a0=23ed820 a1=7fffe49d89c0 a2=7fffe49d89c0 a3=0 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.870:29775): avc: denied { read } for pid=2836 comm="consolehelper-g" name="index.theme" dev=dm-4 ino=8151456 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:user_home_t:s0 tclass=file type=AVC msg=audit(1285250706.870:29775): avc: denied { open } for pid=2836 comm="consolehelper-g" name="index.theme" dev=dm-4 ino=8151456 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:user_home_t:s0 tclass=file type=SYSCALL msg=audit(1285250706.870:29775): arch=c000003e syscall=2 success=yes exit=12 a0=23ed820 a1=0 a2=0 a3=2 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.890:29776): avc: denied { read } for pid=2836 comm="consolehelper-g" name=".icons" dev=dm-4 ino=50593990 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:user_home_t:s0 tclass=dir type=SYSCALL msg=audit(1285250706.890:29776): arch=c000003e syscall=2 success=yes exit=12 a0=23ebf30 a1=90800 a2=30ce78b180 a3=1 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.890:29777): avc: denied { read } for pid=2836 comm="consolehelper-g" name="icons" dev=dm-4 ino=12452989 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:gconf_home_t:s0 tclass=dir type=SYSCALL msg=audit(1285250706.890:29777): arch=c000003e syscall=2 success=yes exit=12 a0=23ebf90 a1=90800 a2=30ce78b180 a3=1 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.935:29778): avc: denied { create } for pid=2836 comm="consolehelper-g" key=0 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:staff_r:staff_consolehelper_t:s0 tclass=shm type=SYSCALL msg=audit(1285250706.935:29778): arch=c000003e syscall=29 success=yes exit=1212441 a0=0 a1=60000 a2=380 a3=22dd000 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.936:29779): avc: denied { unix_read unix_write } for pid=2836 comm="consolehelper-g" key=0 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:staff_r:staff_consolehelper_t:s0 tclass=shm type=AVC msg=audit(1285250706.936:29779): avc: denied { read write } for pid=2836 comm="consolehelper-g" key=0 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:staff_r:staff_consolehelper_t:s0 tclass=shm type=AVC msg=audit(1285250706.936:29779): avc: denied { read write } for pid=2836 comm="consolehelper-g" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=1212441 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:tmpfs_t:s0 tclass=file type=SYSCALL msg=audit(1285250706.936:29779): arch=c000003e syscall=30 success=yes exit=139806553219072 a0=128019 a1=0 a2=0 a3=22dd000 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null) type=AVC msg=audit(1285250706.938:29780): avc: denied { destroy } for pid=2836 comm="consolehelper-g" key=0 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:staff_r:staff_consolehelper_t:s0 tclass=shm type=SYSCALL msg=audit(1285250706.938:29780): arch=c000003e syscall=31 success=yes exit=0 a0=128019 a1=0 a2=0 a3=22dd000 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)