Bug 632792 - SELinux는 /usr/lib64/xulrunner-1.9.2/plugin-container을(를) "read" 액세스하지 못하게 합니다. on /home/sangu/.pulse/5108bbeb1274e
Summary: SELinux는 /usr/lib64/xulrunner-1.9.2/plugin-container을(를) "read" 액세스하지 못하게 합니다...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 14
Hardware: x86_64
OS: Linux
low
medium
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: setroubleshoot_trace_hash:350664cdee1...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-09-11 00:43 UTC by sangu
Modified: 2010-09-25 05:38 UTC (History)
2 users (show)

Fixed In Version: selinux-policy-3.9.5-3.fc14
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-09-25 05:38:01 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description sangu 2010-09-11 00:43:57 UTC
요약:

SELinux는 /usr/lib64/xulrunner-1.9.2/plugin-container을(를) "read" 액세스하지 못하게 합니다.
on /home/sangu/.pulse/5108bbeb1274e

상세 설명:

[plugin-containe은(는) 허용 유형 (mozilla_plugin_t)이 있습니다. 이 액세스는 거부되지 않습니다. ]

SELinux는 plugin-containe에 의해 요청된 액세스를 거부합니다. plugin-containe에 의해 요청된 액세스를 예상하지
못했으며 이러한 액세스는 침입을

액세스 허용:

이러한 액세스를 허용하기 위해 로컬 정책 모듈을 생성하실 수 있습니다 - <a
href="http://docs.fedoraproject.org/selinux-faq-fc5/#id296138

자세한 정보:

소스 문맥                         unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c
                              0.c1023
대상 문맥                         unconfined_u:object_r:pulseaudio_home_t:s0
대상 객체                         /home/sangu/.pulse/5108bbeb1274e77d3012d9da0000001
                              1-runtime [ lnk_file ]
소스                            plugin-containe
소스 경로                         /usr/lib64/xulrunner-1.9.2/plugin-container
포트                            <알려지지 않음>
호스트                           (removed)
소스 RPM 패키지                    xulrunner-1.9.2.7-2.fc14
대상 RPM 패키지                    
정책 RPM                        selinux-policy-3.9.3-4.fc14
Selinux 활성화                   True
정책 유형                         targeted
강제 모드                         Enforcing
플러그인명                         catchall
호스트명                          (removed)
플랫폼                           Linux (removed)
                              2.6.35.4-14.fc14.x86_64 #1 SMP Wed Sep 1 19:37:58
                              KST 2010 x86_64 x86_64
통지 카운트                        1
초기 화면                         2010년 09월 11일 (토) 오전 09시 32분 13초
마지막 화면                        2010년 09월 11일 (토) 오전 09시 32분 13초
로컬 ID                         12eea640-a51b-4a14-96f7-e119fe1dbbcd
줄 번호                          

원 감사 메세지                      

node=(removed) type=AVC msg=audit(1284165133.934:30): avc:  denied  { read } for  pid=2707 comm="plugin-containe" name="5108bbeb1274e77d3012d9da00000011-runtime" dev=dm-0 ino=262253 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:pulseaudio_home_t:s0 tclass=lnk_file

node=(removed) type=SYSCALL msg=audit(1284165133.934:30): arch=c000003e syscall=42 success=yes exit=0 a0=19 a1=7f80af470e20 a2=6e a3=7f80af470d6c items=0 ppid=2462 pid=2707 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="plugin-containe" exe="/usr/lib64/xulrunner-1.9.2/plugin-container" subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null)



Hash String generated from  catchall,plugin-containe,mozilla_plugin_t,pulseaudio_home_t,lnk_file,read
audit2allow suggests:

#============= mozilla_plugin_t ==============
allow mozilla_plugin_t pulseaudio_home_t:lnk_file read;

Comment 1 Daniel Walsh 2010-09-13 14:28:26 UTC
Fixed in selinux-policy-3.9.4-1.fc14

Comment 2 Fedora Update System 2010-09-22 23:02:56 UTC
selinux-policy-3.9.5-3.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/selinux-policy-3.9.5-3.fc14

Comment 3 Fedora Update System 2010-09-23 19:32:37 UTC
selinux-policy-3.9.5-3.fc14 has been pushed to the Fedora 14 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update selinux-policy'.  You can provide feedback for this update here: https://admin.fedoraproject.org/updates/selinux-policy-3.9.5-3.fc14

Comment 4 Fedora Update System 2010-09-25 05:37:01 UTC
selinux-policy-3.9.5-3.fc14 has been pushed to the Fedora 14 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.