Summary: SELinux is preventing access to files with the label, file_t. Detailed Description: [SELinux is in permissive mode. This access was not denied.] SELinux permission checks on files labeled file_t are being denied. file_t is the context the SELinux kernel gives to files that do not have a label. This indicates a serious labeling problem. No files on an SELinux box should ever be labeled file_t. If you have just added a disk drive to the system you can relabel it using the restorecon command. For example if you saved the home directory from a previous installation that did not use SELinux, 'restorecon -R -v /home' will fix the labels. Otherwise you should relabel the entire file system. Allowing Access: You can execute the following command as root to relabel your computer system: "touch /.autorelabel; reboot" Additional Information: Source Context unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 Target Context unconfined_u:object_r:file_t:s0 Target Objects enforce [ file ] Source passwd Source Path /usr/bin/passwd Port <Unknown> Host (removed) Source RPM Packages passwd-0.77-1.fc12 Target RPM Packages Policy RPM selinux-policy-3.6.32-55.fc12 Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Plugin Name file Host Name (removed) Platform Linux (removed) 2.6.31.6-162.fc12.x86_64 #1 SMP Fri Dec 4 00:06:26 EST 2009 x86_64 x86_64 Alert Count 22 First Seen Tue 08 Dec 2009 11:53:41 AM CET Last Seen Tue 08 Dec 2009 05:39:29 PM CET Local ID c02f6663-e469-4cd3-b6f5-b27136b6c277 Line Numbers Raw Audit Messages node=(removed) type=AVC msg=audit(1260290369.754:32860): avc: denied { read } for pid=4965 comm="passwd" name="enforce" dev=loop4 ino=13 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file node=(removed) type=AVC msg=audit(1260290369.754:32860): avc: denied { open } for pid=4965 comm="passwd" name="enforce" dev=loop4 ino=13 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file node=(removed) type=SYSCALL msg=audit(1260290369.754:32860): arch=c000003e syscall=2 success=yes exit=128 a0=7fff8ce78940 a1=0 a2=7fff8ce78950 a3=0 items=0 ppid=28334 pid=4965 auid=501 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=5 comm="passwd" exe="/usr/bin/passwd" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) Hash String generated from selinux-policy-3.6.32-55.fc12,file,passwd,passwd_t,file_t,file,read audit2allow suggests: #============= passwd_t ============== allow passwd_t file_t:file { read open };
*** This bug has been marked as a duplicate of bug 537613 ***