Bug 637604 - SELinux report a program as mislabelled and purpose to correct it with the same label.
Summary: SELinux report a program as mislabelled and purpose to correct it with the sa...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 13
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-09-26 20:43 UTC by Alexandre Dutriaux
Modified: 2010-10-19 07:05 UTC (History)
2 users (show)

Fixed In Version: selinux-policy-3.7.19-65.fc13
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-10-19 07:05:50 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Alexandre Dutriaux 2010-09-26 20:43:05 UTC
Description of problem:
Selinux report the program /var/lib/boinc/projects/www.freehal.net_freehal_at_home/freehalboinc_1.73_i686-pc-linux-gnu
to be mislabelled with the label : boinc_project_var_lib_t
and purpose to correct it with the label : boinc_project_var_lib_t

Both label are equal. 
(Here is the resume in french : 
Le type SELinux par défaut de
/var/lib/boinc/projects/www.freehal.net_freehal_at_home/freehalboinc_1.73_i686-pc-linux-gnu
est boinc_project_var_lib_t, mais son type actuel est boinc_project_var_lib_t.
Utiliser le type par défaut à nouveau corrigera peut-être le problème.)


Version-Release number of selected component (if applicable):
libselinux 2.0.94-2.fc13
libsemanage 2.0.45-1.fc13
libsepol 2.0.41-3.fc13
policycoreutils 2.0.83-28.fc13
selinux-policy 3.7.19-57.fc13
selinux-policy-targeted 3.7.19-57.fc13
setools-lib 3.3.7-7.fc13 
setroubleshoot 2.2.96-1.fc13

How reproducible:
Download the boinc-client and boinc-manager (via yum), and execute the project called freehal. 

Steps to Reproduce:
1. yum install boinc-client boinc-manager
2. in boinc manager : Tools > join a project or a ... > Select FreeHAL in the list of projects
3. create an account 
4. complete your subscription on the website of the project, and select only non cpu intensive work unit
  
Actual results:
SELinux reports the program as mislabelled

Expected results:
Selinux should report nothing.

Additional info:

Résumé:

SELinux empêche
/var/lib/boinc/projects/www.freehal.net_freehal_at_home/freehalboinc_1.73_i686-pc-linux-gnu
d'« ioctl » au périphérique /usr/share/perl5/strict.pm.

Description détaillée:

SELinux a refusé la requête d'accès de
/var/lib/boinc/projects/www.freehal.net_freehal_at_home/freehalboinc_1.73_i686-pc-linux-gnu.
/var/lib/boinc/projects/www.freehal.net_freehal_at_home/freehalboinc_1.73_i686-pc-linux-gnu
est mal étiquetté. Le type SELinux par défaut de
/var/lib/boinc/projects/www.freehal.net_freehal_at_home/freehalboinc_1.73_i686-pc-linux-gnu
est boinc_project_var_lib_t, mais son type actuel est boinc_project_var_lib_t.
Utiliser le type par défaut à nouveau corrigera peut-être le problème.

Si vous pensez qu'il s'agit d'un bogue, veuillez remplir un rapport de bogue
pour ce pa

Autoriser l'accès:

Vous pouvez restaurer le contexte par défaut du système sur ce fichier en
exécutant la commande restorecon. restorecon
'/var/lib/boinc/projects/www.freehal.net_freehal_at_home/freehalboinc_1.73_i686-pc-linux-gnu'.

Commande de correction:

/sbin/restorecon
'/var/lib/boinc/projects/www.freehal.net_freehal_at_home/freehalboinc_1.73_i686-pc-linux-gnu'

Informations complémentaires:

Contexte source               system_u:system_r:boinc_project_t:s0
Contexte cible                system_u:object_r:usr_t:s0
Objets du contexte            /usr/share/perl5/strict.pm [ file ]
source                        freehalboinc_1.
Chemin de la source           /var/lib/boinc/projects/www.freehal.net_freehal_at
                              _home/freehalboinc_1.73_i686-pc-linux-gnu
Port                          <Inconnu>
Hôte                          Fedoration
Paquetages RPM source         
Paquetages RPM cible          perl-5.10.1-119.fc13
Politique RPM                 selinux-policy-3.7.19-57.fc13
Selinux activé                True
Type de politique             targeted
Mode strict                   Enforcing
Nom du plugin                 restore_source_context
Nom de l'hôte                 Fedoration
Plateforme                    Linux Fedoration 2.6.34.7-56.fc13.i686 #1 SMP Wed
                              Sep 15 03:33:58 UTC 2010 i686 i686
Compteur d'alertes            70
Première alerte               dim. 19 sept. 2010 09:08:58 CEST
Dernière alerte               dim. 26 sept. 2010 22:17:34 CEST
ID local                      217840b3-4099-4044-b3b6-70fb8526e6e7
Numéros des lignes            

Messages d'audit bruts        

node=Fedoration type=AVC msg=audit(1285532254.204:23314): avc:  denied  { ioctl } for  pid=2366 comm="freehalboinc_1." path="/usr/share/perl5/strict.pm" dev=dm-1 ino=137448 scontext=system_u:system_r:boinc_project_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file

node=Fedoration type=SYSCALL msg=audit(1285532254.204:23314): arch=40000003 syscall=54 success=no exit=-25 a0=f a1=5401 a2=b7770a58 a3=b7770a98 items=0 ppid=1583 pid=2366 auid=4294967295 uid=491 gid=479 euid=491 suid=491 fsuid=491 egid=479 sgid=479 fsgid=479 tty=(none) ses=4294967295 comm="freehalboinc_1." exe="/var/lib/boinc/projects/www.freehal.net_freehal_at_home/freehalboinc_1.73_i686-pc-linux-gnu" subj=system_u:system_r:boinc_project_t:s0 key=(null)

Comment 1 Miroslav Grepl 2010-10-01 13:24:27 UTC
Fixed in selinux-policy-3.7.19-63.fc13

Comment 2 Fedora Update System 2010-10-08 10:31:26 UTC
selinux-policy-3.7.19-65.fc13 has been submitted as an update for Fedora 13.
https://admin.fedoraproject.org/updates/selinux-policy-3.7.19-65.fc13

Comment 3 Fedora Update System 2010-10-08 20:47:57 UTC
selinux-policy-3.7.19-65.fc13 has been pushed to the Fedora 13 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update selinux-policy'.  You can provide feedback for this update here: https://admin.fedoraproject.org/updates/selinux-policy-3.7.19-65.fc13

Comment 4 Fedora Update System 2010-10-19 07:04:35 UTC
selinux-policy-3.7.19-65.fc13 has been pushed to the Fedora 13 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.