Bug 639065

Summary: Regular SELinux Alerts
Product: [Fedora] Fedora Reporter: Daniel Scott <dan>
Component: selinux-policy-targetedAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED ERRATA QA Contact: Ben Levenson <benl>
Severity: medium Docs Contact:
Priority: low    
Version: 13CC: ingvar, kevin
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: selinux-policy-3.7.19-65.fc13 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-10-19 07:06:24 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Daniel Scott 2010-09-30 18:10:53 UTC
Description of problem:
Regular entries in /var/log/audit/audit.log

type=USER_AVC msg=audit(1285869909.955:4604): user pid=1219 uid=28 auid=4294967295 ses=4294967295 subj=system_u:system_r:nscd_t:s0 msg='avc:  denied  { shmempwd } for  scontext=system_u:system_r:munin_system_plugin_t:s0 tcontext=system_u:system_r:nscd_t:s0 tclass=nscd : exe="?" sauid=28 hostname=? addr=? terminal=?'
type=USER_AVC msg=audit(1285869909.956:4605): user pid=1219 uid=28 auid=4294967295 ses=4294967295 subj=system_u:system_r:nscd_t:s0 msg='avc:  denied  { getpwd } for  scontext=system_u:system_r:munin_system_plugin_t:s0 tcontext=system_u:system_r:nscd_t:s0 tclass=nscd : exe="?" sauid=28 hostname=? addr=? terminal=?'
type=USER_AVC msg=audit(1285869910.082:4606): user pid=1219 uid=28 auid=4294967295 ses=4294967295 subj=system_u:system_r:nscd_t:s0 msg='avc:  denied  { shmemgrp } for  scontext=system_u:system_r:munin_system_plugin_t:s0 tcontext=system_u:system_r:nscd_t:s0 tclass=nscd : exe="?" sauid=28 hostname=? addr=? terminal=?'
type=USER_AVC msg=audit(1285869910.082:4607): user pid=1219 uid=28 auid=4294967295 ses=4294967295 subj=system_u:system_r:nscd_t:s0 msg='avc:  denied  { getgrp } for  scontext=system_u:system_r:munin_system_plugin_t:s0 tcontext=system_u:system_r:nscd_t:s0 tclass=nscd : exe="?" sauid=28 hostname=? addr=? terminal=?'

Version-Release number of selected component (if applicable):
munin-node-1.4.5-4.fc13.noarch
selinux-policy-3.7.19-57.fc13.noarch

How reproducible:


Steps to Reproduce:
1.Regularly logs when munin updates
2.
3.
  
Actual results:
SELinux alerts

Expected results:
No alert

Additional info:

Comment 1 Kevin Fenzi 2010-09-30 18:22:42 UTC
Moving over to selinux policy for comment.

Comment 2 Daniel Walsh 2010-09-30 19:13:28 UTC
I have a feeling this is the system plugin calling getpw?

Miroslav we can either add

nscd_usr or

auth_use_nsswitch

Comment 3 Miroslav Grepl 2010-10-01 13:27:35 UTC
Fixed in selinux-policy-3.7.19-63.fc13

Comment 4 Fedora Update System 2010-10-08 10:31:59 UTC
selinux-policy-3.7.19-65.fc13 has been submitted as an update for Fedora 13.
https://admin.fedoraproject.org/updates/selinux-policy-3.7.19-65.fc13

Comment 5 Fedora Update System 2010-10-08 20:48:29 UTC
selinux-policy-3.7.19-65.fc13 has been pushed to the Fedora 13 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update selinux-policy'.  You can provide feedback for this update here: https://admin.fedoraproject.org/updates/selinux-policy-3.7.19-65.fc13

Comment 6 Fedora Update System 2010-10-19 07:05:16 UTC
selinux-policy-3.7.19-65.fc13 has been pushed to the Fedora 13 stable repository.  If problems still persist, please make note of it in this bug report.