Résumé:

SELinux is preventing /opt/google/chrome/chrome-sandbox from executing
/opt/google/chrome/chrome-sandbox.

Description détaillée:

[SELinux est en mode permissif. Cet accès n'a pas été refusé.]

SELinux has denied the chrome-sandbox from executing
/opt/google/chrome/chrome-sandbox. If chrome-sandbox is supposed to be able to
execute /opt/google/chrome/chrome-sandbox, this could be a labeling problem.
Most confined domains are allowed to execute files labeled bin_t. So you could
change the labeling on this file to bin_t and retry the application. If this
chrome-sandbox is not supposed to execute /opt/google/chrome/chrome-sandbox,
this could signal an intrusion attempt.

Autoriser l'accès:

If you want to allow chrome-sandbox to execute
/opt/google/chrome/chrome-sandbox: chcon -t bin_t
'/opt/google/chrome/chrome-sandbox' If this fix works, please update the file
context on disk, with the following command: semanage fcontext -a -t bin_t
'/opt/google/chrome/chrome-sandbox' Please specify the full path to the
executable, Please file a bug report to make sure this becomes the default
labeling.

Informations complémentaires:

Contexte source               staff_u:staff_r:staff_mono_t:s0-s0:c0.c1023
Contexte cible                system_u:object_r:usr_t:s0
Objets du contexte            /opt/google/chrome/chrome-sandbox [ file ]
source                        gnome-do
Chemin de la source           /usr/bin/mono
Port                          <Inconnu>
Hôte                         (removed)
Paquetages RPM source         google-chrome-unstable-5.0.366.2-43280
Paquetages RPM cible          google-chrome-unstable-5.0.366.2-43280
Politique RPM                 selinux-policy-3.6.32-106.fc12
Selinux activé               True
Type de politique             targeted
Mode strict                   Permissive
Nom du plugin                 execute
Nom de l'hôte                (removed)
Plateforme                    Linux (removed)
                              2.6.32.10-90.fc12.x86_64 #1 SMP Tue Mar 23
                              09:47:08 UTC 2010 x86_64 x86_64
Compteur d'alertes            9
Première alerte              lun 05 avr 2010 18:08:17 EDT
Dernière alerte              lun 05 avr 2010 18:32:50 EDT
ID local                      4ef67ac3-e817-403c-8b1c-982440f928fb
Numéros des lignes           

Messages d'audit bruts        

node=(removed) type=AVC msg=audit(1270506770.161:101): avc:  denied  { execute } for  pid=2391 comm="chrome" name="chrome-sandbox" dev=dm-2 ino=4204608 scontext=staff_u:staff_r:staff_mono_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file

node=(removed) type=AVC msg=audit(1270506770.161:101): avc:  denied  { execute_no_trans } for  pid=2391 comm="chrome" path="/opt/google/chrome/chrome-sandbox" dev=dm-2 ino=4204608 scontext=staff_u:staff_r:staff_mono_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file

node=(removed) type=SYSCALL msg=audit(1270506770.161:101): arch=c000003e syscall=59 success=yes exit=0 a0=3b6ac58 a1=3bcf340 a2=7fff7cb6a938 a3=7fff7cb67db0 items=0 ppid=2346 pid=2391 auid=500 uid=500 gid=501 euid=0 suid=0 fsuid=0 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="chrome-sandbox" exe="/opt/google/chrome/chrome-sandbox" subj=staff_u:staff_r:staff_mono_t:s0-s0:c0.c1023 key=(null)



Hash String generated from  execute,gnome-do,staff_mono_t,usr_t,file,execute
audit2allow suggests:

#============= staff_mono_t ==============
allow staff_mono_t usr_t:file { execute execute_no_trans };