Bug 640628

Summary:

SELinux is preventing minirosetta_2.1 "unix_write" access .

Detailed Description:

[minirosetta_2.1 has a permissive type (boinc_project_t). This access was not
denied.]

SELinux denied access requested by minirosetta_2.1. It is not expected that this
access is required by minirosetta_2.1 and this access may signal an intrusion
attempt. It is also possible that the specific version or configuration of the
application is causing it to require additional access.

Allowing Access:

You can generate a local policy module to allow this access - see FAQ
(http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug
report.

Additional Information:

Source Context                system_u:system_r:boinc_project_t:s0
Target Context                system_u:system_r:boinc_project_t:s0
Target Objects                None [ sem ]
Source                        minirosetta_2.1
Source Path                   minirosetta_2.1
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           
Target RPM Packages           
Policy RPM                    selinux-policy-3.9.5-7.fc14
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Plugin Name                   catchall
Host Name                     (removed)
Platform                      Linux (removed) 2.6.35.4-28.fc14.x86_64 #1 SMP Wed
                              Sep 15 01:56:54 UTC 2010 x86_64 x86_64
Alert Count                   6
First Seen                    Wed 06 Oct 2010 14:50:37 BST
Last Seen                     Wed 06 Oct 2010 14:51:55 BST
Local ID                      32e9b49a-6579-4912-b1ba-0e073540a8d1
Line Numbers                  

Raw Audit Messages            

node=(removed) type=AVC msg=audit(1286373115.507:32542): avc:  denied  { unix_write } for  pid=2410 comm="minirosetta_2.1" key=54323  scontext=system_u:system_r:boinc_project_t:s0 tcontext=system_u:system_r:boinc_project_t:s0 tclass=sem

node=(removed) type=AVC msg=audit(1286373115.507:32542): avc:  denied  { read write } for  pid=2410 comm="minirosetta_2.1" key=54323  scontext=system_u:system_r:boinc_project_t:s0 tcontext=system_u:system_r:boinc_project_t:s0 tclass=sem

node=(removed) type=SYSCALL msg=audit(1286373115.507:32542): arch=40000003 syscall=117 per=400000 success=yes exit=0 a0=1 a1=70000 a2=1 a3=0 items=0 ppid=1639 pid=2410 auid=4294967295 uid=492 gid=482 euid=492 suid=492 fsuid=492 egid=482 sgid=482 fsgid=482 tty=(none) ses=4294967295 comm="minirosetta_2.1" subj=system_u:system_r:boinc_project_t:s0 key=(null)



Hash String generated from  catchall,minirosetta_2.1,boinc_project_t,boinc_project_t,sem,unix_write
audit2allow suggests:

#============= boinc_project_t ==============
allow boinc_project_t self:sem { read write unix_write };