Bug 787354

Summary: SELinux is preventing /usr/bin/updatedb from 'getattr' accesses on the None /home/tad/.config/google-chrome/Default/Local Storage.
Product: [Fedora] Fedora Reporter: Tad <tadp>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 16CC: dominick.grift, dwalsh, mgrepl
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
Whiteboard: abrt_hash:80d2976bc6ff1319106eae806f3e4e2838933840a85ba26c1026baefdf080525
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-02-05 20:20:40 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Tad 2012-02-04 11:11:22 UTC
libreport version: 2.0.8
executable:     /usr/bin/python
hashmarkername: setroubleshoot
kernel:         3.2.2-1.fc16.x86_64
reason:         SELinux is preventing /usr/bin/updatedb from 'getattr' accesses on the None /home/tad/.config/google-chrome/Default/Local Storage.
time:           sob, 4 lut 2012, 12:09:46

description:
:SELinux is preventing /usr/bin/updatedb from 'getattr' accesses on the None /home/tad/.config/google-chrome/Default/Local Storage.
:
:*****  Plugin catchall (100. confidence) suggests  ***************************
:
:If aby updatedb powinno mieć domyślnie getattr dostęp do Local Storage <Nieznane>.
:Then proszę to zgłosić jako błąd.
:Można utworzyć lokalny moduł polityki, aby umożliwić ten dostęp.
:Do
:można tymczasowo zezwolić na ten dostęp wykonując polecenia:
:# grep updatedb /var/log/audit/audit.log | audit2allow -M mojapolityka
:# semodule -i mojapolityka.pp
:
:Additional Information:
:Source Context                system_u:system_r:locate_t:s0-s0:c0.c1023
:Target Context                unconfined_u:object_r:unlabeled_t:s0
:Target Objects                /home/tad/.config/google-chrome/Default/Local
:                              Storage [ None ]
:Source                        updatedb
:Source Path                   /usr/bin/updatedb
:Port                          <Nieznane>
:Host                          (removed)
:Source RPM Packages           
:Target RPM Packages           
:Policy RPM                    <Nieznane>
:Selinux Enabled               True
:Policy Type                   targeted
:Enforcing Mode                Enforcing
:Host Name                     (removed)
:Platform                      Linux (removed) 3.2.2-1.fc16.x86_64 #1
:                              SMP Thu Jan 26 03:21:58 UTC 2012 x86_64 x86_64
:Alert Count                   22
:First Seen                    pon, 30 sty 2012, 18:29:32
:Last Seen                     pią, 3 lut 2012, 10:38:31
:Local ID                      9bb1caad-5686-454c-9b8c-8261e406568e
:
:Raw Audit Messages
:type=AVC msg=audit(1328261911.703:86): avc:  denied  { getattr } for  pid=4655 comm="updatedb" path=2F686F6D652F7461642F2E636F6E6669672F676F6F676C652D6368726F6D652F44656661756C742F4C6F63616C2053746F72616765 dev=sda7 ino=8126815 scontext=system_u:system_r:locate_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dirnode=(removed) type=SYSCALL msg=audit(1328261911.703:86): arch=c000003e syscall=6 success=no exit=-13 a0=1b26199 a1=7fff8500da20 a2=7fff8500da20 a3=0 items=0 ppid=4649 pid=4655 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0-s0:c0.c1023 key=(null)
:
:
:Hash: updatedb,locate_t,unlabeled_t,None,getattr
:
:audit2allow
:
:
:audit2allow -R
:
:

Comment 1 Miroslav Grepl 2012-02-05 20:20:40 UTC
I would guess there was an update problem. 

Just execute restorecon

$ restorecon -R -v /home/tad/.config