Bug 565276 - SELinux is preventing /usr/bin/gdb "write" access on /usr/share/glib-2.0/gdb.
Summary: SELinux is preventing /usr/bin/gdb "write" access on /usr/share/glib-2.0...
Keywords:
Status: CLOSED DUPLICATE of bug 528554
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 12
Hardware: i386
OS: Linux
low
medium
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: setroubleshoot_trace_hash:ed7d416f1b0...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-02-14 09:59 UTC by tomek.by
Modified: 2011-02-25 16:52 UTC (History)
22 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2010-02-14 14:40:18 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description tomek.by 2010-02-14 09:59:29 UTC
Podsumowanie:

SELinux is preventing /usr/bin/gdb "write" access on /usr/share/glib-2.0/gdb.

Szczegółowy opis:

SELinux denied access requested by gdb. It is not expected that this access is
required by gdb and this access may signal an intrusion attempt. It is also
possible that the specific version or configuration of the application is
causing it to require additional access.

Zezwalanie na dostęp:

You can generate a local policy module to allow this access - see FAQ
(http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug
report.

Dodatkowe informacje:

Kontekst źródłowy          system_u:system_r:xdm_t:s0-s0:c0.c1023
Kontekst docelowy             system_u:object_r:usr_t:s0
Obiekty docelowe              /usr/share/glib-2.0/gdb [ dir ]
Źródło                     gdb
Ścieżka źródłowa         /usr/bin/gdb
Port                          <Nieznane>
Komputer                      (removed)
Źródłowe pakiety RPM       gdb-7.0.1-31.fc12
Docelowe pakiety RPM          glib2-devel-2.22.4-2.fc12
Pakiet RPM polityki           selinux-policy-3.6.32-84.fc12
SELinux jest włączony       True
Typ polityki                  targeted
Tryb wymuszania               Enforcing
Nazwa wtyczki                 catchall
Nazwa komputera               (removed)
Platforma                     Linux (removed) 2.6.31.12-174.2.3.fc12.i686 #1 SMP Mon
                              Jan 18 20:22:46 UTC 2010 i686 athlon
Liczba alarmów               2
Po raz pierwszy               sob, 13 lut 2010, 22:51:18
Po raz ostatni                sob, 13 lut 2010, 22:51:18
Lokalny identyfikator         dd22e667-f48a-47e1-874a-e3928c949f16
Liczba wierszy                

Surowe komunikaty audytu      

node=(removed) type=AVC msg=audit(1266097878.372:150): avc:  denied  { write } for  pid=7251 comm="gdb" name="gdb" dev=dm-0 ino=98567 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=dir

node=(removed) type=SYSCALL msg=audit(1266097878.372:150): arch=40000003 syscall=5 success=no exit=-13 a0=bf8c8fcb a1=82c1 a2=81ed a3=bf8ca02b items=0 ppid=7250 pid=7251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="gdb" exe="/usr/bin/gdb" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)



Hash String generated from  catchall,gdb,xdm_t,usr_t,dir,write
audit2allow suggests:

#============= xdm_t ==============
#!!!! The source type 'xdm_t' can write to a 'dir' of the following types:
# pcscd_var_run_t, var_lock_t, xkb_var_lib_t, xdm_rw_etc_t, root_t, tmp_t, var_t, user_fonts_t, user_tmpfs_t, xdm_spool_t, fonts_cache_t, user_home_dir_t, locale_t, var_auth_t, xserver_tmp_t, tmpfs_t, var_spool_t, user_tmp_t, var_lib_t, var_run_t, auth_cache_t, xdm_tmpfs_t, xserver_log_t, var_log_t, xdm_log_t, pam_var_run_t, xdm_var_lib_t, xdm_var_run_t, xdm_home_t, pam_var_console_t, root_t, nfs_t

allow xdm_t usr_t:dir write;

Comment 1 Daniel Walsh 2010-02-14 14:40:18 UTC

*** This bug has been marked as a duplicate of bug 528554 ***


Note You need to log in before you can comment on or make changes to this bug.