Summary:

SELinux prevented dbus-daemon from reading files stored on a NFS filesytem.

Detailed Description:

[SELinux is in permissive mode. This access was not denied.]

SELinux prevented dbus-daemon from reading files stored on a NFS filesystem. NFS
(Network Filesystem) is a network filesystem commonly used on Unix / Linux
systems. dbus-daemon attempted to read one or more files or directories from a
mounted filesystem of this type. As NFS filesystems do not support fine-grained
SELinux labeling, all files and directories in the filesystem will have the same
security context. If you have not configured dbus-daemon to read files from a
NFS filesystem this access attempt could signal an intrusion attempt.

Allowing Access:

Changing the "use_nfs_home_dirs" boolean to true will allow this access:
"setsebool -P use_nfs_home_dirs=1"

Fix Command:

setsebool -P use_nfs_home_dirs=1

Additional Information:

Source Context                system_u:system_r:xdm_dbusd_t:s0-s0:c0.c1023
Target Context                system_u:object_r:nfs_t:s0
Target Objects                 [ dir ]
Source                        dbus-daemon
Source Path                   /bin/dbus-daemon
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           dbus-1.2.16-8.fc12
Target RPM Packages           
Policy RPM                    selinux-policy-3.6.32-41.fc12
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Permissive
Plugin Name                   use_nfs_home_dirs
Host Name                     (removed)
Platform                      Linux (removed)
                              2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7
                              21:25:57 EST 2009 i686 i686
Alert Count                   5
First Seen                    Mon 23 Nov 2009 02:53:54 PM PST
Last Seen                     Mon 23 Nov 2009 05:37:38 PM PST
Local ID                      c87cc05d-84dd-4ef0-a7a1-2b48b3d82382
Line Numbers                  

Raw Audit Messages            

node=(removed) type=AVC msg=audit(1259026658.426:28391): avc:  denied  { search } for  pid=25246 comm="dbus-daemon" name="" dev=0:14 ino=29689720 scontext=system_u:system_r:xdm_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=dir

node=(removed) type=SYSCALL msg=audit(1259026658.426:28391): arch=40000003 syscall=5 success=no exit=-2 a0=208e268 a1=98800 a2=b0eff4 a3=208e268 items=0 ppid=25245 pid=25246 auid=4294967295 uid=42 gid=470 euid=42 suid=42 fsuid=42 egid=470 sgid=470 fsgid=470 tty=(none) ses=4294967295 comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:xdm_dbusd_t:s0-s0:c0.c1023 key=(null)



Hash String generated from  selinux-policy-3.6.32-41.fc12,use_nfs_home_dirs,dbus-daemon,xdm_dbusd_t,nfs_t,dir,search
audit2allow suggests:

#============= xdm_dbusd_t ==============
allow xdm_dbusd_t nfs_t:dir search;