Bug 430205 - AVC denials: logwatch_t,tmpreaper_t,procmail_t
AVC denials: logwatch_t,tmpreaper_t,procmail_t
Status: CLOSED NOTABUG
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted (Show other bugs)
rawhide
All Linux
low Severity low
: ---
: ---
Assigned To: Daniel Walsh
Ben Levenson
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2008-01-25 03:41 EST by Dominick Grift
Modified: 2008-01-25 09:52 EST (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2008-01-25 09:52:15 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Dominick Grift 2008-01-25 03:41:50 EST
Description of problem:
With SELinux enforced i do not receive my logwatch reports. There are also other
avc denials at 4 O'clock:

time->Fri Jan 25 04:10:32 2008
type=SYSCALL msg=audit(1201230632.279:47): arch=40000003 syscall=195 success=yes
exit=0 a0=925ad18 a1=920d0c8 a2=6a0ff4 a3=92866cc items=0 ppid=5335 pid=5653
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
tty=(none) comm="perl" exe="/usr/bin/perl"
subj=system_u:system_r:logwatch_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1201230632.279:47): avc:  denied  { getattr } for  pid=5653
comm="perl" path="/var/spool/mail/dgrift" dev=dm-2 ino=6799970
scontext=system_u:system_r:logwatch_t:s0-s0:c0.c1023
tcontext=unconfined_u:object_r:user_gnome_home_t:s0 tclass=file
----
time->Fri Jan 25 04:10:33 2008
type=SYSCALL msg=audit(1201230633.425:48): arch=40000003 syscall=196 success=yes
exit=0 a0=9024d90 a1=bf86f4cc a2=6a0ff4 a3=64 items=0 ppid=5730 pid=5731
auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12
tty=(none) comm="procmail" exe="/usr/bin/procmail"
subj=system_u:system_r:procmail_t:s0 key=(null)
type=AVC msg=audit(1201230633.425:48): avc:  denied  { getattr } for  pid=5731
comm="procmail" path="/var/spool/mail/dgrift" dev=dm-2 ino=6799970
scontext=system_u:system_r:procmail_t:s0
tcontext=unconfined_u:object_r:user_gnome_home_t:s0 tclass=file
----
time->Fri Jan 25 04:10:33 2008
type=SYSCALL msg=audit(1201230633.453:49): arch=40000003 syscall=5 success=yes
exit=4 a0=90244f0 a1=8441 a2=1b7 a3=8441 items=0 ppid=5730 pid=5731
auid=4294967295 uid=500 gid=12 euid=500 suid=500 fsuid=500 egid=12 sgid=12
fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail"
subj=system_u:system_r:procmail_t:s0 key=(null)
type=AVC msg=audit(1201230633.453:49): avc:  denied  { append } for  pid=5731
comm="procmail" name="dgrift" dev=dm-2 ino=6799970
scontext=system_u:system_r:procmail_t:s0
tcontext=unconfined_u:object_r:user_gnome_home_t:s0 tclass=file
----
time->Fri Jan 25 04:10:33 2008
type=SYSCALL msg=audit(1201230633.454:50): arch=40000003 syscall=221 success=yes
exit=0 a0=4 a1=e a2=805d7f8 a3=805d7f8 items=0 ppid=5730 pid=5731
auid=4294967295 uid=500 gid=12 euid=500 suid=500 fsuid=500 egid=12 sgid=12
fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail"
subj=system_u:system_r:procmail_t:s0 key=(null)
type=AVC msg=audit(1201230633.454:50): avc:  denied  { lock } for  pid=5731
comm="procmail" path="/var/spool/mail/dgrift" dev=dm-2 ino=6799970
scontext=system_u:system_r:procmail_t:s0
tcontext=unconfined_u:object_r:user_gnome_home_t:s0 tclass=file
----
time->Fri Jan 25 04:12:30 2008
type=SYSCALL msg=audit(1201230750.618:51): arch=40000003 syscall=30 success=yes
exit=0 a0=804ac72 a1=bfdb86f0 a2=0 a3=922b148 items=0 ppid=9727 pid=9729
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch"
subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1201230750.618:51): avc:  denied  { setattr } for  pid=9729
comm="tmpwatch" name="dvips" dev=dm-2 ino=6799857
scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023
tcontext=system_u:object_r:var_lib_t:s0 tclass=dir

Version-Release number of selected component (if applicable):
selinux-policy-targeted-3.2.5-18.fc9

How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:
Comment 1 Dominick Grift 2008-01-25 04:03:35 EST
Whoops solved sorry. I must relabel my filesystem. the context are somehow
corrupted. 
Comment 2 Daniel Walsh 2008-01-25 09:52:15 EST
restorecon -R -v /var/spool/

should fix.

Note You need to log in before you can comment on or make changes to this bug.