Résumé:

SELinux is preventing consoletype (consoletype_t) "write" to
/home/julroy67/.xsession-errors (user_home_t).

Description détaillée:

[consoletype has a permissive type (consoletype_t). This access was not denied.]

SELinux denied access requested by consoletype. /home/julroy67/.xsession-errors
may be a mislabeled. /home/julroy67/.xsession-errors default SELinux type is
xdm_home_t, but its current type is user_home_t. Changing this file back to the
default type, may fix your problem.

File contexts can be assigned to a file in the following ways.

  * Files created in a directory receive the file context of the parent
    directory by default.
  * The SELinux policy might override the default label inherited from the
    parent directory by specifying a process running in context A which creates
    a file in a directory labeled B will instead create the file with label C.
    An example of this would be the dhcp client running with the dhclient_t type
    and creates a file in the directory /etc. This file would normally receive
    the etc_t type due to parental inheritance but instead the file is labeled
    with the net_conf_t type because the SELinux policy specifies this.
  * Users can change the file context on a file using tools such as chcon, or
    restorecon.

This file could have been mislabeled either by user error, or if an normally
confined application was run under the wrong domain.

However, this might also indicate a bug in SELinux because the file should not
have been labeled with this type.

If you believe this is a bug, please file a bug report
(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this package.

Autoriser l'accès:

You can restore the default system context to this file by executing the
restorecon command. restorecon '/home/julroy67/.xsession-errors', if this file
is a directory, you can recursively restore using restorecon -R
'/home/julroy67/.xsession-errors'.

Commande de correction:

restorecon '/home/julroy67/.xsession-errors'

Informations complémentaires:

Contexte source               unconfined_u:system_r:consoletype_t:s0
Contexte cible                unconfined_u:object_r:user_home_t:s0
Objets du contexte            /home/julroy67/.xsession-errors [ file ]
source                        consoletype
Chemin de la source           /sbin/consoletype
Port                          <Inconnu>
Hôte                         (removed)
Paquetages RPM source         initscripts-8.95-1
Paquetages RPM cible          
Politique RPM                 selinux-policy-3.6.12-85.fc11
Selinux activé               True
Type de politique             targeted
MLS activé                   True
Mode strict                   Enforcing
Nom du plugin                 restorecon
Nom de l'hôte                (removed)
Plateforme                    Linux (removed) 2.6.30.8-64.fc11.x86_64 #1 SMP
                              Fri Sep 25 04:43:32 EDT 2009 x86_64 x86_64
Compteur d'alertes            3
Première alerte              mer. 10 juin 2009 15:12:26 CEST
Dernière alerte              mer. 10 juin 2009 17:04:47 CEST
ID local                      65170da0-c2c7-4f24-a0ee-6c144d360096
Numéros des lignes           

Messages d'audit bruts        

node=(removed) type=AVC msg=audit(1244639546.303:22): avc:  denied  { write } for  pid=2586 comm="consoletype" path="/home/julroy67/.xsession-errors" dev=dm-0 ino=131263 scontext=unconfined_u:system_r:consoletype_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file

node=(removed) type=SYSCALL msg=audit(1244639546.303:22): arch=c000003e syscall=59 success=yes exit=0 a0=1f1cd10 a1=1f1cd70 a2=1f1c8e0 a3=10 items=0 ppid=2585 pid=2586 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="consoletype" exe="/sbin/consoletype" subj=unconfined_u:system_r:consoletype_t:s0 key=(null)



Hash String generated from  selinux-policy-3.6.12-85.fc11,restorecon,consoletype,consoletype_t,user_home_t,file,write
audit2allow suggests:

#============= consoletype_t ==============
allow consoletype_t user_home_t:file write;