Sammanfattning:

SELinux is preventing /usr/libexec/udisks-daemon "execute" access on
/sbin/mdadm.

Detaljerad beskrivning:

SELinux denied access requested by udisks-daemon. It is not expected that this
access is required by udisks-daemon and this access may signal an intrusion
attempt. It is also possible that the specific version or configuration of the
application is causing it to require additional access.

Att tillåta åtkomst:

You can generate a local policy module to allow this access - see FAQ
(http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug
report.

Ytterligare information:

Källkontext                  system_u:system_r:devicekit_disk_t:s0-s0:c0.c1023
Målkontext                   system_u:object_r:mdadm_exec_t:s0
Målobjekt                    /sbin/mdadm [ file ]
Källa                        udisks-daemon
Källsökväg                 /usr/libexec/udisks-daemon
Port                          <Okänd>
Värd                         (removed)
Käll-RPM-paket               udisks-1.0.0-0.git20100223.1.fc13
Mål-RPM-paket                mdadm-3.1.1-0.gcd9a8b5.3.fc13
Policy-RPM                    selinux-policy-3.7.14-3.fc13
SELinux aktiverat             True
Policytyp                     targeted
Verkställande läge          Enforcing
Insticksmodulnamn             catchall
Värdnamn                     (removed)
Plattform                     Linux (removed) 2.6.33-1.fc13.x86_64 #1
                              SMP Wed Feb 24 19:55:32 UTC 2010 x86_64 x86_64
Antal larm                    1
Först sedd                   mån 15 mar 2010 21.23.38
Senast sedd                   mån 15 mar 2010 21.23.38
Lokalt ID                     7ce08a41-22d3-45f5-a214-d410e21212f1
Radnummer                     

Råa granskningsmeddelanden   

node=(removed) type=AVC msg=audit(1268684618.457:32367): avc:  denied  { execute } for  pid=16153 comm="udisks-daemon" name="mdadm" dev=dm-0 ino=11250 scontext=system_u:system_r:devicekit_disk_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mdadm_exec_t:s0 tclass=file

node=(removed) type=SYSCALL msg=audit(1268684618.457:32367): arch=c000003e syscall=59 success=no exit=-13 a0=2233bf5 a1=7fff4980cb30 a2=2207b40 a3=1 items=0 ppid=2491 pid=16153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="udisks-daemon" exe="/usr/libexec/udisks-daemon" subj=system_u:system_r:devicekit_disk_t:s0-s0:c0.c1023 key=(null)



Hash String generated from  catchall,udisks-daemon,devicekit_disk_t,mdadm_exec_t,file,execute
audit2allow suggests:

#============= devicekit_disk_t ==============
allow devicekit_disk_t mdadm_exec_t:file execute;