Resum:

SELinux is preventing /usr/bin/abrt-pyhook-helper "write" access on
/var/run/nscd/socket.

Descripció detallada:

[abrt-pyhook-hel has a permissive type (abrt_helper_t). This access was not
denied.]

SELinux denied access requested by abrt-pyhook-hel. It is not expected that this
access is required by abrt-pyhook-hel and this access may signal an intrusion
attempt. It is also possible that the specific version or configuration of the
application is causing it to require additional access.

Permet l'accés:

You can generate a local policy module to allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Please file a bug
report.

Informació addicional:

Context de la font            unconfined_u:unconfined_r:abrt_helper_t:s0-s0:c0.c
                              1023
Context de l'objectiu         system_u:object_r:nscd_var_run_t:s0
Objectes objectius            /var/run/nscd/socket [ sock_file ]
Font                          abrt-pyhook-hel
Camí de la font              /usr/bin/abrt-pyhook-helper
Port                          <Desconegut>
Ordinador                     (removed)
Paquests RPM font             abrt-addon-python-1.0.0-1.fc12
Paquets RPM destí            nscd-2.11-2
RPM de política              selinux-policy-3.6.32-49.fc12
S'ha habilitat el Selinux     True
Tipus de la política         targeted
Mode forçat                  Enforcing
Nom del connector             catchall
Nom de la màquina            (removed)
Plataforma                    Linux (removed) 2.6.31.6-145.fc12.x86_64 #1 SMP
                              Sat Nov 21 15:57:45 EST 2009 x86_64 x86_64
Contador d'alertes            2
Vist per primera vegada       dj 26 nov 2009 17:56:52 CET
Vist per darrera vegada       dj 26 nov 2009 17:56:52 CET
Identificador local           b9a91be1-9056-4a06-948c-110b22422c5e
Número de línies            

Missatges d'auditoria sense p 

node=(removed) type=AVC msg=audit(1259254612.81:40): avc:  denied  { write } for  pid=8488 comm="abrt-pyhook-hel" name="socket" dev=dm-8 ino=278649 scontext=unconfined_u:unconfined_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nscd_var_run_t:s0 tclass=sock_file

node=(removed) type=AVC msg=audit(1259254612.81:40): avc:  denied  { connectto } for  pid=8488 comm="abrt-pyhook-hel" path="/var/run/nscd/socket" scontext=unconfined_u:unconfined_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=system_u:system_r:nscd_t:s0 tclass=unix_stream_socket

node=(removed) type=SYSCALL msg=audit(1259254612.81:40): arch=c000003e syscall=42 success=yes exit=68719476864 a0=3 a1=7fff22434b10 a2=6e a3=400 items=0 ppid=2708 pid=8488 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=474 sgid=474 fsgid=474 tty=(none) ses=1 comm="abrt-pyhook-hel" exe="/usr/bin/abrt-pyhook-helper" subj=unconfined_u:unconfined_r:abrt_helper_t:s0-s0:c0.c1023 key=(null)



Hash String generated from  selinux-policy-3.6.32-49.fc12,catchall,abrt-pyhook-hel,abrt_helper_t,nscd_var_run_t,sock_file,write
audit2allow suggests:

#============= abrt_helper_t ==============
allow abrt_helper_t nscd_t:unix_stream_socket connectto;
allow abrt_helper_t nscd_var_run_t:sock_file write;