Bug 984251
| Summary: | SELinux is preventing /usr/bin/totem-video-thumbnailer from 'getattr' accesses on the unix_stream_socket unix_stream_socket. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Sir Beñat Le Cagot <imadestroyer> |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 19 | CC: | dominick.grift, dwalsh, mgrepl |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:b113c9f8ec9e7e71f978402a75cd3b249849f2bdc1cf1ee67c6d88cc5b2d8c02 | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2013-07-15 21:32:28 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
*** This bug has been marked as a duplicate of bug 970119 *** |
Description of problem: SELinux is preventing /usr/bin/totem-video-thumbnailer from 'getattr' accesses on the unix_stream_socket unix_stream_socket. ***** Plugin catchall (100. confidence) suggests *************************** If cree que de manera predeterminada, totem-video-thumbnailer debería permitir acceso getattr sobre unix_stream_socket unix_stream_socket. Then debería reportar esto como un error. Puede generar un módulo de política local para permitir este acceso. Do permita el acceso momentáneamente executando: # grep time-monitor /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 Target Context system_u:system_r:xdm_t:s0-s0:c0.c1023 Target Objects unix_stream_socket [ unix_stream_socket ] Source time-monitor Source Path /usr/bin/totem-video-thumbnailer Port <Desconocido> Host (removed) Source RPM Packages totem-3.8.2-1.fc19.x86_64 Target RPM Packages Policy RPM selinux-policy-3.12.1-59.fc19.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Host Name (removed) Platform Linux (removed) 3.9.9-301.fc19.x86_64 #1 SMP Thu Jul 4 15:10:36 UTC 2013 x86_64 x86_64 Alert Count 4 First Seen 2013-07-12 00:28:31 CDT Last Seen 2013-07-12 19:13:40 CDT Local ID 77ef6f18-e5e8-4130-a367-7cb23d4e3b26 Raw Audit Messages type=AVC msg=audit(1373674420.965:1219): avc: denied { getattr } for pid=19711 comm="totem-video-thu" path="socket:[18148]" dev="sockfs" ino=18148 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=unix_stream_socket type=SYSCALL msg=audit(1373674420.965:1219): arch=x86_64 syscall=fstat success=yes exit=0 a0=1 a1=7fffd6705650 a2=7fffd6705650 a3=7fffd6705560 items=0 ppid=19279 pid=19711 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 ses=1 tty=(none) comm=totem-video-thu exe=/usr/bin/totem-video-thumbnailer subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) Hash: time-monitor,thumb_t,xdm_t,unix_stream_socket,getattr Additional info: reporter: libreport-2.1.5 hashmarkername: setroubleshoot kernel: 3.9.9-301.fc19.x86_64 type: libreport