Bug 558745 - SELinux is preventing the python from using potentially mislabeled files (ffixDhcgy).
Summary: SELinux is preventing the python from using potentially mislabeled files (ffi...
Keywords:
Status: CLOSED DUPLICATE of bug 538428
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 12
Hardware: i386
OS: Linux
low
medium
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: setroubleshoot_trace_hash:656518fa325...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-01-26 09:56 UTC by ivan
Modified: 2010-01-26 13:55 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2010-01-26 13:55:05 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description ivan 2010-01-26 09:56:32 UTC
Resúmen:

SELinux is preventing the python from using potentially mislabeled files
(ffixDhcgy).

Descripción Detallada:

SELinux has denied python access to potentially mislabeled file(s) (ffixDhcgy).
This means that SELinux will not allow python to use these files. It is common
for users to edit files in their home directory or tmp directories and then move
(mv) them to system directories. The problem is that the files end up with the
wrong file context which confined applications are not allowed to access.

Permitiendo Acceso:

If you want python to access this files, you need to relabel them using
restorecon -v 'ffixDhcgy'. You might want to relabel the entire directory using
restorecon -R -v ''.

Información Adicional:

Contexto Fuente               system_u:system_r:NetworkManager_t:s0
Contexto Destino              system_u:object_r:tmp_t:s0
Objetos Destino               ffixDhcgy [ file ]
Fuente                        python
Dirección de Fuente          /usr/bin/python
Puerto                        <Desconocido>
Nombre de Equipo              (removed)
Paquetes RPM Fuentes          python-2.6-9.fc11
Paquetes RPM Destinos         
RPM de Políticas             selinux-policy-3.6.12-85.fc11
SELinux Activado              True
Tipo de Política             targeted
Modo Obediente                Enforcing
Nombre de Plugin              home_tmp_bad_labels
Nombre de Equipo              (removed)
Plataforma                    Linux (removed) 2.6.30.8-64.fc11.i586 #1 SMP Fri
                              Sep 25 04:30:19 EDT 2009 i686 i686
Cantidad de Alertas           1
Visto por Primera Vez         vie 16 oct 2009 23:21:47 CEST
Visto por Última Vez         vie 16 oct 2009 23:21:47 CEST
ID Local                      003300d5-44e9-46d9-8c9e-fc119cea2597
Números de Línea            

Mensajes de Auditoría Crudos 

node=(removed) type=AVC msg=audit(1255728107.739:6): avc:  denied  { create } for  pid=1856 comm="python" name="ffixDhcgy" scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file

node=(removed) type=SYSCALL msg=audit(1255728107.739:6): arch=40000003 syscall=5 success=no exit=-13 a0=bfe176b0 a1=c2 a2=180 a3=41e6 items=0 ppid=1855 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="python" exe="/usr/bin/python" subj=system_u:system_r:NetworkManager_t:s0 key=(null)



Hash String generated from  selinux-policy-3.6.12-85.fc11,home_tmp_bad_labels,python,NetworkManager_t,tmp_t,file,create
audit2allow suggests:

#============= NetworkManager_t ==============
allow NetworkManager_t tmp_t:file create;

Comment 1 Miroslav Grepl 2010-01-26 13:55:05 UTC

*** This bug has been marked as a duplicate of bug 538428 ***


Note You need to log in before you can comment on or make changes to this bug.