Bug 1372909 - SELinux is preventing bash from 'create' accesses on the file 62.
Summary: SELinux is preventing bash from 'create' accesses on the file 62.
Keywords:
Status: CLOSED DUPLICATE of bug 1345836
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 24
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:548e6731b3df941254f74b117b3...
: 1378457 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-09-03 15:32 UTC by Michał
Modified: 2016-09-22 12:59 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-09-04 10:48:02 UTC
Type: ---


Attachments (Terms of Use)

Description Michał 2016-09-03 15:32:20 UTC
Description of problem:
I don't know what caused problem... I'm using gnome-terminal, zsh and i runned wine and in this moment error popped up
SELinux is preventing bash from 'create' accesses on the file 62.

*****  Plugin catchall (100. confidence) suggests   **************************

If aby bash powinno mieć domyślnie create dostęp do 62 file.
Then proszę to zgłosić jako błąd.
Można utworzyć lokalny moduł polityki, aby umożliwić ten dostęp.
Do
allow this access for now by executing:
# ausearch -c 'bash' --raw | audit2allow -M my-bash
# semodule -X 300 -i my-bash.pp

Additional Information:
Source Context                unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1
                              023
Target Context                unconfined_u:object_r:unconfined_t:s0
Target Objects                62 [ file ]
Source                        bash
Source Path                   bash
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           
Target RPM Packages           
Policy RPM                    selinux-policy-3.13.1-191.14.fc24.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 4.7.2-201.fc24.x86_64 #1 SMP Fri
                              Aug 26 15:58:40 UTC 2016 x86_64 x86_64
Alert Count                   2
First Seen                    2016-09-03 17:30:08 CEST
Last Seen                     2016-09-03 17:30:08 CEST
Local ID                      6a399d75-4fe6-40d6-85f4-2bf871be225c

Raw Audit Messages
type=AVC msg=audit(1472916608.199:281): avc:  denied  { create } for  pid=13269 comm="bash" name="62" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=file permissive=0


Hash: bash,unconfined_t,unconfined_t,file,create

Version-Release number of selected component:
selinux-policy-3.13.1-191.14.fc24.noarch

Additional info:
reporter:       libreport-2.7.2
hashmarkername: setroubleshoot
kernel:         4.7.2-201.fc24.x86_64
type:           libreport

Comment 1 Daniel Walsh 2016-09-04 10:43:10 UTC
We have discovered that we need to create a dontaudit rule for this.

Comment 2 Daniel Walsh 2016-09-04 10:48:02 UTC

*** This bug has been marked as a duplicate of bug 1345836 ***

Comment 3 Efs 2016-09-22 12:59:43 UTC
*** Bug 1378457 has been marked as a duplicate of this bug. ***


Note You need to log in before you can comment on or make changes to this bug.