Bug 695601

The following was filed automatically by setroubleshoot:

Summary:

SELinux is preventing npviewer.bin (nsplugin_t) "read write"
/home/sen/.execoooLH0ne3 (deleted) (user_home_dir_t).

Detailed Description:

SELinux denied access requested by the npviewer.bin command. It looks like this
is either a leaked descriptor or npviewer.bin output was redirected to a file it
is not allowed to access. Leaks usually can be ignored since SELinux is just
closing the leak and reporting the error. The application does not use the
descriptor, so it will run properly. If this is a redirection, you will not get
output in the /home/sen/.execoooLH0ne3 (deleted). You should generate a bugzilla
on selinux-policy, and it will get routed to the appropriate package. You can
safely ignore this avc.

Allowing Access:

You can generate a local policy module to allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385)

Additional Information:

Source Context                unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c102
                              3
Target Context                unconfined_u:object_r:user_home_dir_t:s0
Target Objects                /home/sen/.execoooLH0ne3 (deleted) [ file ]
Source                        npviewer.bin
Source Path                   /usr/lib/nspluginwrapper/npviewer.bin
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           nspluginwrapper-1.3.0-8.fc12
Target RPM Packages           
Policy RPM                    selinux-policy-3.6.26-8.fc12
Selinux Enabled               True
Policy Type                   targeted
MLS Enabled                   True
Enforcing Mode                Enforcing
Plugin Name                   leaks
Host Name                     (removed)
Platform                      Linux (removed)
                              2.6.31-0.125.4.2.rc5.git2.fc12.i686.PAE #1 SMP Tue
                              Aug 11 21:01:03 EDT 2009 i686 i686
Alert Count                   12
First Seen                    Tue 12 Apr 2011 05:44:47 PM IST
Last Seen                     Tue 12 Apr 2011 05:44:47 PM IST
Local ID                      0a401442-49e5-4cba-b72a-596345239581
Line Numbers                  

Raw Audit Messages            

node=(removed) type=AVC msg=audit(1302610487.896:24659): avc:  denied  { read write } for  pid=2393 comm="npviewer.bin" path=2F686F6D652F73656E2F2E657865636F6F6F4C48306E6533202864656C6574656429 dev=dm-1 ino=252726 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file

node=(removed) type=AVC msg=audit(1302610487.896:24659): avc:  denied  { read write } for  pid=2393 comm="npviewer.bin" path=2F686F6D652F73656E2F2E657865636F6F6F6F4661636F7A202864656C6574656429 dev=dm-1 ino=252748 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file

node=(removed) type=AVC msg=audit(1302610487.896:24659): avc:  denied  { read write } for  pid=2393 comm="npviewer.bin" path=2F686F6D652F73656E2F2E657865636F6F6F786C34397835202864656C6574656429 dev=dm-1 ino=252750 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file

node=(removed) type=AVC msg=audit(1302610487.896:24659): avc:  denied  { read write } for  pid=2393 comm="npviewer.bin" path=2F686F6D652F73656E2F2E657865636F6F6F6D686E6A4942202864656C6574656429 dev=dm-1 ino=252752 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file

node=(removed) type=AVC msg=audit(1302610487.896:24659): avc:  denied  { read write } for  pid=2393 comm="npviewer.bin" path=2F686F6D652F73656E2F2E657865636F6F6F726679655437202864656C6574656429 dev=dm-1 ino=252941 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file

node=(removed) type=AVC msg=audit(1302610487.896:24659): avc:  denied  { read write } for  pid=2393 comm="npviewer.bin" path=2F686F6D652F73656E2F2E657865636F6F6F475531693444202864656C6574656429 dev=dm-1 ino=252956 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file

node=(removed) type=AVC msg=audit(1302610487.896:24659): avc:  denied  { read write } for  pid=2393 comm="npviewer.bin" path=2F686F6D652F73656E2F2E657865636F6F6F425276525761202864656C6574656429 dev=dm-1 ino=252960 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file

node=(removed) type=AVC msg=audit(1302610487.896:24659): avc:  denied  { read write } for  pid=2393 comm="npviewer.bin" path="/home/sen/.openoffice.org/3/user/uno_packages/cache/log.txt" dev=dm-1 ino=253187 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=file

node=(removed) type=AVC msg=audit(1302610487.896:24659): avc:  denied  { read } for  pid=2393 comm="npviewer.bin" path="/tmp/sv7ok.tmp/sv7pm.tmp" dev=dm-1 ino=253215 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=file

node=(removed) type=AVC msg=audit(1302610487.896:24659): avc:  denied  { read write } for  pid=2393 comm="npviewer.bin" path="/tmp/sv7ok.tmp/sv7po.tmp" dev=dm-1 ino=253225 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=file

node=(removed) type=AVC msg=audit(1302610487.896:24659): avc:  denied  { read write } for  pid=2393 comm="npviewer.bin" path="/tmp/sv7ok.tmp/sv815.tmp" dev=dm-1 ino=253234 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=file

node=(removed) type=AVC msg=audit(1302610487.896:24659): avc:  denied  { read write } for  pid=2393 comm="npviewer.bin" path="/tmp/sv7ok.tmp/sv818.tmp" dev=dm-1 ino=253247 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=file

node=(removed) type=SYSCALL msg=audit(1302610487.896:24659): arch=40000003 syscall=11 success=yes exit=0 a0=8e0f730 a1=8e10bc0 a2=8e111a0 a3=8e10bc0 items=0 ppid=2391 pid=2393 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null)


audit2allow suggests:

#============= nsplugin_t ==============
allow nsplugin_t tmp_t:file { read write };
allow nsplugin_t user_home_dir_t:file { read write };