Fedora Account System
Red Hat Associate
Red Hat Customer
Description of problem: SELinux is preventing /usr/bin/ps from using the 'sys_ptrace' capabilities. ***** Plugin mozplugger (99.1 confidence) suggests ************************ If vous voulez utiliser le paquet plugin Then vous devez désactiver les contrôles SELinux sur les extensions Firefox. Do # setsebool -P unconfined_mozilla_plugin_transition 0 ***** Plugin catchall (1.81 confidence) suggests ************************** If vous pensez que ps devrait avoir des capacités sys_ptrace par défaut. Then vous devriez rapporter ceci en tant qu'anomalie. Vous pouvez générer un module de stratégie local pour autoriser cet accès. Do autoriser cet accès pour le moment en exécutant : # grep ps /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c 0.c1023 Target Context unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c 0.c1023 Target Objects [ capability ] Source ps Source Path /usr/bin/ps Port <Unknown> Host (removed) Source RPM Packages procps-ng-3.3.8-17.fc20.x86_64 Target RPM Packages Policy RPM selinux-policy-3.12.1-197.fc20.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 3.19.5-100.fc20.x86_64 #1 SMP Mon Apr 20 19:51:16 UTC 2015 x86_64 x86_64 Alert Count 7 First Seen 2015-04-22 21:14:49 CEST Last Seen 2015-05-12 16:32:29 CEST Local ID f612adc5-4b98-4b38-8947-a188e7db883b Raw Audit Messages type=AVC msg=audit(1431441149.878:4049): avc: denied { sys_ptrace } for pid=32639 comm="ps" capability=19 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tclass=capability permissive=0 type=SYSCALL msg=audit(1431441149.878:4049): arch=x86_64 syscall=read success=yes exit=198 a0=a a1=14d13c0 a2=400 a3=4 items=0 ppid=32638 pid=32639 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=1 comm=ps exe=/usr/bin/ps subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null) Hash: ps,mozilla_plugin_t,mozilla_plugin_t,capability,sys_ptrace Additional info: reporter: libreport-2.2.3 hashmarkername: setroubleshoot kernel: 3.19.5-100.fc20.x86_64 type: libreport Potential duplicate: bug 662295
*** This bug has been marked as a duplicate of bug 1202043 ***