Description of problem: al conectar un iphone 5 SELinux is preventing /usr/sbin/usbmuxd from using the 'fsetid' capabilities. ***** Plugin catchall (100. confidence) suggests ************************** If cree que usbmuxd debería tener la capacidad de fsetid de forma predeterminada. Then debería reportar esto como un error. Puede generar un módulo de política local para permitir este acceso. Do permita el acceso momentáneamente executando: # grep usbmuxd /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:usbmuxd_t:s0 Target Context system_u:system_r:usbmuxd_t:s0 Target Objects [ capability ] Source usbmuxd Source Path /usr/sbin/usbmuxd Port <Unknown> Host (removed) Source RPM Packages usbmuxd-1.0.9-0.6.c24463e.fc20.x86_64 Target RPM Packages Policy RPM selinux-policy-3.12.1-183.fc20.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 3.16.3-200.fc20.x86_64 #1 SMP Wed Sep 17 22:34:21 UTC 2014 x86_64 x86_64 Alert Count 2 First Seen 2014-10-05 11:26:17 CEST Last Seen 2014-10-05 11:40:49 CEST Local ID 727b214a-561e-411b-bfda-488f7672aeb6 Raw Audit Messages type=AVC msg=audit(1412502049.288:378): avc: denied { fsetid } for pid=2150 comm="usbmuxd" capability=4 scontext=system_u:system_r:usbmuxd_t:s0 tcontext=system_u:system_r:usbmuxd_t:s0 tclass=capability permissive=0 type=AVC msg=audit(1412502049.288:378): avc: denied { fsetid } for pid=2150 comm="usbmuxd" capability=4 scontext=system_u:system_r:usbmuxd_t:s0 tcontext=system_u:system_r:usbmuxd_t:s0 tclass=capability permissive=0 type=SYSCALL msg=audit(1412502049.288:378): arch=x86_64 syscall=chmod success=yes exit=0 a0=1c052a0 a1=5fd a2=7fffd009f5f0 a3=0 items=0 ppid=1 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=usbmuxd exe=/usr/sbin/usbmuxd subj=system_u:system_r:usbmuxd_t:s0 key=(null) Hash: usbmuxd,usbmuxd_t,usbmuxd_t,capability,fsetid Additional info: reporter: libreport-2.2.3 hashmarkername: setroubleshoot kernel: 3.16.3-200.fc20.x86_64 type: libreport
commit e941c7e1132dc7fc1837f6e054f9a0a2ce52cc5c Author: Lukas Vrabec <lvrabec> Date: Tue Oct 7 13:13:25 2014 +0200 Allow usbmuxd fsedit cap. BZ #(1149451) https://github.com/selinux-policy/selinux-policy/commit/e941c7e1132dc7fc1837f6e054f9a0a2ce52cc5c
selinux-policy-3.12.1-189.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/selinux-policy-3.12.1-189.fc20
Package selinux-policy-3.12.1-189.fc20: * should fix your issue, * was pushed to the Fedora 20 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.12.1-189.fc20' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2014-12350/selinux-policy-3.12.1-189.fc20 then log in and leave karma (feedback).
selinux-policy-3.12.1-189.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.