636864 – consolehelper AVCs

Bug 636864 - consolehelper AVCs

Summary: consolehelper AVCs

Keywords:
Status:	CLOSED ERRATA
Alias:	None
Product:	Fedora
Classification:	Fedora
Component:	selinux-policy-targeted
Sub Component:
Version:	14
Hardware:	All
OS:	Linux
Priority:	low
Severity:	medium
Target Milestone:	---
Assignee:	Daniel Walsh
QA Contact:	Ben Levenson
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2010-09-23 14:10 UTC by Carl G.
Modified:	2010-10-05 13:14 UTC (History)
CC List:	0 users
Fixed In Version:	selinux-policy-3.9.5-7.fc14
Clone Of:
Environment:
Last Closed:	2010-10-05 13:14:27 UTC
Type:	---
Embargoed:
Dependent Products:

Attachments	(Terms of Use)

Description Carl G. 2010-09-23 14:10:25 UTC

type=AVC msg=audit(1285250706.852:29763): avc:  denied  { read } for  pid=2836 comm="consolehelper-g" name=".fonts.conf" dev=dm-4 ino=48238464 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:user_fonts_config_t:s0 tclass=file
type=SYSCALL msg=audit(1285250706.852:29763): arch=c000003e syscall=21 success=yes exit=0 a0=23a25f0 a1=4 a2=6 a3=4 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.852:29764): avc:  denied  { getattr } for  pid=2836 comm="consolehelper-g" path="/home/carl/.fonts.conf" dev=dm-4 ino=48238464 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:user_fonts_config_t:s0 tclass=file
type=SYSCALL msg=audit(1285250706.852:29764): arch=c000003e syscall=4 success=yes exit=0 a0=23a25f0 a1=7fffe49d4aa0 a2=7fffe49d4aa0 a3=1 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.852:29765): avc:  denied  { open } for  pid=2836 comm="consolehelper-g" name=".fonts.conf" dev=dm-4 ino=48238464 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:user_fonts_config_t:s0 tclass=file
type=SYSCALL msg=audit(1285250706.852:29765): arch=c000003e syscall=2 success=yes exit=15 a0=23a25f0 a1=0 a2=0 a3=1 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.859:29766): avc:  denied  { getattr } for  pid=2836 comm="consolehelper-g" path="/usr/share/fonts" dev=dm-1 ino=244 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=system_u:object_r:fonts_t:s0 tclass=dir
type=SYSCALL msg=audit(1285250706.859:29766): arch=c000003e syscall=4 success=yes exit=0 a0=2396640 a1=7fffe49d9890 a2=7fffe49d9890 a3=1 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.859:29767): avc:  denied  { search } for  pid=2836 comm="consolehelper-g" name="fontconfig" dev=dm-1 ino=13691 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=system_u:object_r:fonts_cache_t:s0 tclass=dir
type=AVC msg=audit(1285250706.859:29767): avc:  denied  { read } for  pid=2836 comm="consolehelper-g" name="3830d5c3ddfd5cd38a049b759396e72e-le64.cache-3" dev=dm-1 ino=6402 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:fonts_cache_t:s0 tclass=file
type=AVC msg=audit(1285250706.859:29767): avc:  denied  { open } for  pid=2836 comm="consolehelper-g" name="3830d5c3ddfd5cd38a049b759396e72e-le64.cache-3" dev=dm-1 ino=6402 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:fonts_cache_t:s0 tclass=file
type=SYSCALL msg=audit(1285250706.859:29767): arch=c000003e syscall=2 success=yes exit=12 a0=2395e20 a1=0 a2=2395e63 a3=fffffffffffffff0 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.860:29768): avc:  denied  { getattr } for  pid=2836 comm="consolehelper-g" path="/var/cache/fontconfig/3830d5c3ddfd5cd38a049b759396e72e-le64.cache-3" dev=dm-1 ino=6402 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:fonts_cache_t:s0 tclass=file
type=SYSCALL msg=audit(1285250706.860:29768): arch=c000003e syscall=5 success=yes exit=0 a0=c a1=7fffe49d9920 a2=7fffe49d9920 a3=fffffffffffffff0 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.860:29769): avc:  denied  { search } for  pid=2836 comm="consolehelper-g" name="fonts" dev=dm-1 ino=8486 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=system_u:object_r:fonts_t:s0 tclass=dir
type=SYSCALL msg=audit(1285250706.860:29769): arch=c000003e syscall=4 success=no exit=-2 a0=23966d0 a1=7fffe49d9890 a2=7fffe49d9890 a3=ffffffffffffffff items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.863:29770): avc:  denied  { read } for  pid=2836 comm="consolehelper-g" name="DejaVuSansCondensed.ttf" dev=dm-1 ino=786605 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=system_u:object_r:fonts_t:s0 tclass=file
type=AVC msg=audit(1285250706.863:29770): avc:  denied  { open } for  pid=2836 comm="consolehelper-g" name="DejaVuSansCondensed.ttf" dev=dm-1 ino=786605 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=system_u:object_r:fonts_t:s0 tclass=file
type=SYSCALL msg=audit(1285250706.863:29770): arch=c000003e syscall=2 success=yes exit=12 a0=2399aa0 a1=0 a2=0 a3=50 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.863:29771): avc:  denied  { getattr } for  pid=2836 comm="consolehelper-g" path="/usr/share/fonts/dejavu/DejaVuSansCondensed.ttf" dev=dm-1 ino=786605 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=system_u:object_r:fonts_t:s0 tclass=file
type=SYSCALL msg=audit(1285250706.863:29771): arch=c000003e syscall=5 success=yes exit=0 a0=c a1=7fffe49d99d0 a2=7fffe49d99d0 a3=50 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.866:29772): avc:  denied  { getattr } for  pid=2836 comm="consolehelper-g" path="/home/carl/.local/share/mime/mime.cache" dev=dm-4 ino=12453051 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:gconf_home_t:s0 tclass=file
type=SYSCALL msg=audit(1285250706.866:29772): arch=c000003e syscall=4 success=yes exit=0 a0=23cd640 a1=7fffe49d9710 a2=7fffe49d9710 a3=fffffffffffffff0 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.866:29773): avc:  denied  { read } for  pid=2836 comm="consolehelper-g" name="mime.cache" dev=dm-4 ino=12453051 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:gconf_home_t:s0 tclass=file
type=AVC msg=audit(1285250706.866:29773): avc:  denied  { open } for  pid=2836 comm="consolehelper-g" name="mime.cache" dev=dm-4 ino=12453051 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:gconf_home_t:s0 tclass=file
type=SYSCALL msg=audit(1285250706.866:29773): arch=c000003e syscall=2 success=yes exit=13 a0=23cd640 a1=0 a2=0 a3=696d2f656d696d2f items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.870:29774): avc:  denied  { getattr } for  pid=2836 comm="consolehelper-g" path="/home/carl/.icons/elementary/index.theme" dev=dm-4 ino=8151456 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:user_home_t:s0 tclass=file
type=SYSCALL msg=audit(1285250706.870:29774): arch=c000003e syscall=4 success=yes exit=0 a0=23ed820 a1=7fffe49d89c0 a2=7fffe49d89c0 a3=0 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.870:29775): avc:  denied  { read } for  pid=2836 comm="consolehelper-g" name="index.theme" dev=dm-4 ino=8151456 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:user_home_t:s0 tclass=file
type=AVC msg=audit(1285250706.870:29775): avc:  denied  { open } for  pid=2836 comm="consolehelper-g" name="index.theme" dev=dm-4 ino=8151456 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:user_home_t:s0 tclass=file
type=SYSCALL msg=audit(1285250706.870:29775): arch=c000003e syscall=2 success=yes exit=12 a0=23ed820 a1=0 a2=0 a3=2 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.890:29776): avc:  denied  { read } for  pid=2836 comm="consolehelper-g" name=".icons" dev=dm-4 ino=50593990 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:user_home_t:s0 tclass=dir
type=SYSCALL msg=audit(1285250706.890:29776): arch=c000003e syscall=2 success=yes exit=12 a0=23ebf30 a1=90800 a2=30ce78b180 a3=1 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.890:29777): avc:  denied  { read } for  pid=2836 comm="consolehelper-g" name="icons" dev=dm-4 ino=12452989 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:gconf_home_t:s0 tclass=dir
type=SYSCALL msg=audit(1285250706.890:29777): arch=c000003e syscall=2 success=yes exit=12 a0=23ebf90 a1=90800 a2=30ce78b180 a3=1 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.935:29778): avc:  denied  { create } for  pid=2836 comm="consolehelper-g" key=0  scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:staff_r:staff_consolehelper_t:s0 tclass=shm
type=SYSCALL msg=audit(1285250706.935:29778): arch=c000003e syscall=29 success=yes exit=1212441 a0=0 a1=60000 a2=380 a3=22dd000 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.936:29779): avc:  denied  { unix_read unix_write } for  pid=2836 comm="consolehelper-g" key=0  scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:staff_r:staff_consolehelper_t:s0 tclass=shm
type=AVC msg=audit(1285250706.936:29779): avc:  denied  { read write } for  pid=2836 comm="consolehelper-g" key=0  scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:staff_r:staff_consolehelper_t:s0 tclass=shm
type=AVC msg=audit(1285250706.936:29779): avc:  denied  { read write } for  pid=2836 comm="consolehelper-g" path=2F535953563030303030303030202864656C6574656429 dev=tmpfs ino=1212441 scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:object_r:tmpfs_t:s0 tclass=file
type=SYSCALL msg=audit(1285250706.936:29779): arch=c000003e syscall=30 success=yes exit=139806553219072 a0=128019 a1=0 a2=0 a3=22dd000 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)
type=AVC msg=audit(1285250706.938:29780): avc:  denied  { destroy } for  pid=2836 comm="consolehelper-g" key=0  scontext=staff_u:staff_r:staff_consolehelper_t:s0 tcontext=staff_u:staff_r:staff_consolehelper_t:s0 tclass=shm
type=SYSCALL msg=audit(1285250706.938:29780): arch=c000003e syscall=31 success=yes exit=0 a0=128019 a1=0 a2=0 a3=22dd000 items=0 ppid=1 pid=2836 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="consolehelper-g" exe="/usr/bin/consolehelper-gtk" subj=staff_u:staff_r:staff_consolehelper_t:s0 key=(null)

Comment 1 Daniel Walsh 2010-09-23 19:16:01 UTC

Fixed in selinux-policy-3.9.5-4.fc14

Comment 2 Fedora Update System 2010-09-25 10:57:44 UTC

selinux-policy-3.9.5-5.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/selinux-policy-3.9.5-5.fc14

Comment 3 Fedora Update System 2010-09-27 03:37:20 UTC

selinux-policy-3.9.5-5.fc14 has been pushed to the Fedora 14 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update selinux-policy'.  You can provide feedback for this update here: https://admin.fedoraproject.org/updates/selinux-policy-3.9.5-5.fc14

Comment 4 Fedora Update System 2010-09-27 14:47:22 UTC

selinux-policy-3.9.5-7.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/selinux-policy-3.9.5-7.fc14

Comment 5 Fedora Update System 2010-10-05 13:13:20 UTC

selinux-policy-3.9.5-7.fc14 has been pushed to the Fedora 14 stable repository.  If problems still persist, please make note of it in this bug report.

Note You need to log in before you can comment on or make changes to this bug.