Zusammenfassung:

SELinux is preventing /usr/bin/abrt-pyhook-helper access to a leaked
/var/cache/yum/x86_64/12/updates-testing/packages/rhythmbox-0.12.6-1.fc12.x86_64.rpm
file descriptor.

Detaillierte Beschreibung:

[abrt-pyhook-hel hat einen toleranten Typ (abrt_helper_t). Dieser Zugriff wurde
nicht verweigert.]

SELinux denied access requested by the abrt-pyhook-hel command. It looks like
this is either a leaked descriptor or abrt-pyhook-hel output was redirected to a
file it is not allowed to access. Leaks usually can be ignored since SELinux is
just closing the leak and reporting the error. The application does not use the
descriptor, so it will run properly. If this is a redirection, you will not get
output in the
/var/cache/yum/x86_64/12/updates-testing/packages/rhythmbox-0.12.6-1.fc12.x86_64.rpm.
You should generate a bugzilla on selinux-policy, and it will get routed to the
appropriate package. You can safely ignore this avc.

Zugriff erlauben:

You can generate a local policy module to allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385)

Zusätzliche Informationen:

Quellkontext                  unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023
Zielkontext                   unconfined_u:object_r:rpm_var_cache_t:s0
Zielobjekte                   /var/cache/yum/x86_64/12/updates-testing/packages/
                              rhythmbox-0.12.6-1.fc12.x86_64.rpm [ file ]
Quelle                        abrt-pyhook-hel
Quellen-Pfad                  /usr/bin/abrt-pyhook-helper
Port                          <Unbekannt>
Host                          (removed)
Quellen-RPM-Pakete            abrt-addon-python-1.0.0-1.fc12
Ziel-RPM-Pakete               
RPM-Richtlinie                selinux-policy-3.6.32-49.fc12
SELinux aktiviert             True
Richtlinienversion            targeted
Enforcing-Modus               Enforcing
Plugin-Name                   leaks
Hostname                      (removed)
Plattform                     Linux (removed) 2.6.31.6-145.fc12.x86_64 #1 SMP Sat
                              Nov 21 15:57:45 EST 2009 x86_64 x86_64
Anzahl der Alarme             1
Zuerst gesehen                Mo 30 Nov 2009 16:40:12 CET
Zuletzt gesehen               Mo 30 Nov 2009 16:40:12 CET
Lokale ID                     808d7cae-ad02-4aec-86ce-4207a6291b94
Zeilennummern                 

Raw-Audit-Meldungen           

node=(removed) type=AVC msg=audit(1259595612.358:30): avc:  denied  { append } for  pid=2805 comm="abrt-pyhook-hel" path="/var/cache/yum/x86_64/12/updates-testing/packages/rhythmbox-0.12.6-1.fc12.x86_64.rpm" dev=sda2 ino=71150 scontext=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:rpm_var_cache_t:s0 tclass=file

node=(removed) type=SYSCALL msg=audit(1259595612.358:30): arch=c000003e syscall=59 success=yes exit=0 a0=33d3d90 a1=41951c0 a2=7fff9b204ea0 a3=792f6e69622f7273 items=0 ppid=2762 pid=2805 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=480 sgid=480 fsgid=480 tty=(none) ses=2 comm="abrt-pyhook-hel" exe="/usr/bin/abrt-pyhook-helper" subj=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 key=(null)



Hash String generated from  selinux-policy-3.6.32-49.fc12,leaks,abrt-pyhook-hel,abrt_helper_t,rpm_var_cache_t,file,append
audit2allow suggests:

#============= abrt_helper_t ==============
allow abrt_helper_t rpm_var_cache_t:file append;