Résumé:

SELinux is preventing /usr/bin/gpg "write" access on S.gpg-agent.

Description détaillée:

SELinux denied access requested by gpg. It is not expected that this access is
required by gpg and this access may signal an intrusion attempt. It is also
possible that the specific version or configuration of the application is
causing it to require additional access.

Autoriser l'accès:

You can generate a local policy module to allow this access - see FAQ
(http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug
report.

Informations complémentaires:

Contexte source               staff_u:staff_r:gpg_t:s0-s0:c0.c1023
Contexte cible                staff_u:object_r:user_tmp_t:s0
Objets du contexte            S.gpg-agent [ sock_file ]
source                        gpg
Chemin de la source           /usr/bin/gpg
Port                          <Inconnu>
Hôte                         (removed)
Paquetages RPM source         gnupg-1.4.10-1.fc12
Paquetages RPM cible          
Politique RPM                 selinux-policy-3.6.32-108.fc12
Selinux activé               True
Type de politique             targeted
Mode strict                   Enforcing
Nom du plugin                 catchall
Nom de l'hôte                (removed)
Plateforme                    Linux (removed)
                              2.6.32.11-99.fc12.x86_64 #1 SMP Mon Apr 5 19:59:38
                              UTC 2010 x86_64 x86_64
Compteur d'alertes            1
Première alerte              mar 13 avr 2010 21:43:20 EDT
Dernière alerte              mar 13 avr 2010 21:43:20 EDT
ID local                      2c9f2b66-74a1-442d-8fcd-9c6510f5be21
Numéros des lignes           

Messages d'audit bruts        

node=(removed) type=AVC msg=audit(1271209400.853:795): avc:  denied  { write } for  pid=13576 comm="gpg" name="S.gpg-agent" dev=dm-2 ino=3177 scontext=staff_u:staff_r:gpg_t:s0-s0:c0.c1023 tcontext=staff_u:object_r:user_tmp_t:s0 tclass=sock_file

node=(removed) type=SYSCALL msg=audit(1271209400.853:795): arch=c000003e syscall=42 success=no exit=-13 a0=7 a1=7fff12f90db0 a2=22 a3=2 items=0 ppid=6765 pid=13576 auid=500 uid=500 gid=501 euid=500 suid=500 fsuid=500 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="gpg" exe="/usr/bin/gpg" subj=staff_u:staff_r:gpg_t:s0-s0:c0.c1023 key=(null)



Hash String generated from  catchall,gpg,gpg_t,user_tmp_t,sock_file,write
audit2allow suggests:

#============= gpg_t ==============
allow gpg_t user_tmp_t:sock_file write;