The following was filed automatically by setroubleshoot:

概述:

SELinux is preventing sh (nsplugin_t) "getattr" admin_home_t.

详细描述:

SELinux denied access requested by sh. It is not expected that this access is
required by sh and this access may signal an intrusion attempt. It is also
possible that the specific version or configuration of the application is
causing it to require additional access.

允许访问:

You can generate a local policy module to allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Please file a bug
report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this package.

附加信息:

源上下文                  unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c102
                              3
目标上下文               system_u:object_r:admin_home_t:s0
目标对象                  /root [ dir ]
源                           sh
源路径                     /bin/bash
端口                        <未知>
主机                        (removed)
源 RPM 软件包             bash-4.0.28-1.fc12
目标 RPM 软件包          filesystem-2.4.27-1.fc12
策略 RPM                    selinux-policy-3.6.26-8.fc12
启用 Selinux                True
策略类型                  targeted
启用 MLS                    True
Enforcing 模式              Enforcing
插件名称                  catchall
主机名                     (removed)
平台                        Linux (removed)
                              2.6.31-0.125.4.2.rc5.git2.fc12.i686.PAE #1 SMP Tue
                              Aug 11 21:01:03 EDT 2009 i686 i686
警报计数                  2
第一个                     2009年09月16日 星期三 09时02分33秒
最后一个                  2009年09月16日 星期三 09时03分12秒
本地 ID                     66f31512-c985-4558-bc62-c457e5d95962
行号                        

原始核查信息            

node=(removed) type=AVC msg=audit(1253062992.649:25150): avc:  denied  { getattr } for  pid=5881 comm="sh" path="/root" dev=sda7 ino=73586 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir

node=(removed) type=SYSCALL msg=audit(1253062992.649:25150): arch=40000003 syscall=195 success=no exit=-13 a0=94296d8 a1=bfbc2090 a2=7e2ff4 a3=0 items=0 ppid=5871 pid=5881 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null)


audit2allow suggests:

#============= nsplugin_t ==============
allow nsplugin_t admin_home_t:dir getattr;