Bug 450383 - Repeated access denial that floods SETroubleshoot
Summary: Repeated access denial that floods SETroubleshoot
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted
Version: 9
Hardware: i386
OS: Linux
low
low
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact: Ben Levenson
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-06-07 10:52 UTC by Volans
Modified: 2008-06-10 20:22 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2008-06-10 20:22:20 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
The full access denial report (2.90 KB, text/plain)
2008-06-07 10:52 UTC, Volans
no flags Details

Description Volans 2008-06-07 10:52:13 UTC
Description of problem:
I keep getting random time adverts which tell me that SELinux has prevented an
access. The problem happens (I think) once a day, without me doing anything.


Version-Release number of selected component (if applicable):

selinux-policy-3.3.1-55.fc9

How reproducible:

I can't reproduce it. It happens randomly.

Steps to Reproduce:
1.
2.
3.
  
Actual results:

Access to a file is prevented.

Expected results:

A message keeps showing telling me that SELinux stopped and access. I get a long
list of prevented accesses, which I can't delete because it's very long and
floods the computer. 


Additional info:

The problem is related with VirtualBox. Actually, the error message shows this:

"
SELinux is preventing tmpwatch (tmpreaper_t) "getattr" to
/tmp/vbox.1/common/string/strformattype.c (usr_t).
"

"SELinux denied access requested by tmpwatch. It is not expected that this
access is required by tmpwatch and this access may signal an intrusion attempt.
It is also possible that the specific version or configuration of the
application is causing it to require additional access. "

Comment 1 Volans 2008-06-07 10:52:13 UTC
Created attachment 308603 [details]
The full access denial report

Comment 2 Daniel Walsh 2008-06-10 20:22:20 UTC
Just remove the file/dir

rm -rf /tmp/vbox.1

tmpreaper is not allowed to delete files on the file system with the label usr_t.

This looks like a file/directory was moved to /tmp but the label was left usr_t.

If you do not want to remove these files you can execute

chcon -R -t tmp_t /tmp/vbox.1



Note You need to log in before you can comment on or make changes to this bug.