Fedora Account System
Red Hat Associate
Red Hat Customer
/var/log/setroubleshoot/setroubleshootd.log : 2010-09-28 13:45:22,829 [avc.ERROR] Plugin Exception kernel_modules Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/setroubleshoot/analyze.py", line 148, in analyze_avc report = plugin.analyze(avc) File "/usr/share/setroubleshoot/plugins/kernel_modules.py", line 47, in analyze if (avc.has_any_access_in(['write']) or avc.open_with_write()) and \ File "/usr/lib/python2.7/site-packages/setroubleshoot/audit_data.py", line 631, in open_with_write if self.a1 and (int(self.a1) & O_ACCMODE) != os.O_RDONLY: ValueError: invalid literal for int() with base 10: '9be0290' I don't know exactly what trigged this - I have 400 alerts that prevents login with se enforcing after updating to f14. setroubleshoot-2.2.99-1.fc14.i686 setroubleshoot-server-2.2.99-1.fc14.i686
mads could you attach the AVC that caused this?
I don't know exactly how to reproduce it. Perhaps something with trying to report a specific AVC? I guess it references this entry from /var/log/audit/audit.log: type=SYSCALL msg=audit(1285674321.939:161): arch=40000003 syscall=11 success=yes exit=0 a0=9be00e8 a1=9be0290 a2=9bdeb48 a3=9be0290 items=0 ppid=2731 pid=2732 auid=501 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="mount" exe="/bin/mount" subj=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 key=(null) I also got the same error with a0* which must be one of: type=SYSCALL msg=audit(1285678672.517:305): arch=40000003 syscall=5 success=yes exit=26 a0=bfb80a40 a1=a0000 a2=0 a3=bfb80b2d items=0 ppid=1 pid=2176 auid=502 uid=502 gid=502 euid=502 suid=502 fsuid=502 egid=502 sgid=502 fsgid=502 tty=(none) ses=1 comm="gnome-settings-" exe="/usr/libexec/gnome-settings-daemon" subj=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 key=(null) type=SYSCALL msg=audit(1285684530.150:24071): arch=40000003 syscall=5 success=yes exit=23 a0=bf9cc6d0 a1=a0000 a2=0 a3=bf9cc7bd items=0 ppid=2074 pid=2183 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="metacity" exe="/usr/bin/metacity" subj=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 key=(null)
ausearch -m avc Should list all avc's
time->Tue Sep 28 13:45:21 2010 type=SYSCALL msg=audit(1285674321.939:161): arch=40000003 syscall=11 success=yes exit=0 a0=9be00e8 a1=9be0290 a2=9bdeb48 a3=9be0290 items=0 ppid=2731 pid=2732 auid=501 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="mount" exe="/bin/mount" subj=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1285674321.939:161): avc: denied { execute_no_trans } for pid=2732 comm="fixfiles" path="/bin/mount" dev=dm-0 ino=475272 scontext=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mount_exec_t:s0 tclass=file type=AVC msg=audit(1285674321.939:161): avc: denied { open } for pid=2732 comm="fixfiles" name="mount" dev=dm-0 ino=475272 scontext=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mount_exec_t:s0 tclass=file time->Tue Sep 28 14:57:52 2010 type=SYSCALL msg=audit(1285678672.517:305): arch=40000003 syscall=5 success=yes exit=26 a0=bfb80a40 a1=a0000 a2=0 a3=bfb80b2d items=0 ppid=1 pid=2176 auid=502 uid=502 gid=502 euid=502 suid=502 fsuid=502 egid=502 sgid=502 fsgid=502 tty=(none) ses=1 co mm="gnome-settings-" exe="/usr/libexec/gnome-settings-daemon" subj=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 key=(nu ll) type=AVC msg=audit(1285678672.517:305): avc: denied { open } for pid=2176 comm="gnome-settings-" name="pulse-shm-423642053 5" dev=tmpfs ino=18681 scontext=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file time->Tue Sep 28 14:57:52 2010 type=SYSCALL msg=audit(1285678672.517:305): arch=40000003 syscall=5 success=yes exit=26 a0=bfb80a40 a1=a0000 a2=0 a3=bfb80b2d items=0 ppid=1 pid=2176 auid=502 uid=502 gid=502 euid=502 suid=502 fsuid=502 egid=502 sgid=502 fsgid=502 tty=(none) ses=1 co mm="gnome-settings-" exe="/usr/libexec/gnome-settings-daemon" subj=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 key=(nu ll) type=AVC msg=audit(1285678672.517:305): avc: denied { open } for pid=2176 comm="gnome-settings-" name="pulse-shm-423642053 5" dev=tmpfs ino=18681 scontext=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file (probably caused by the issue tracked on bug 638150)
Fixed in setroubleshoot-2.2.100-1
setroubleshoot-2.2.101-1.fc14 has been submitted as an update for Fedora 14. https://admin.fedoraproject.org/updates/setroubleshoot-2.2.101-1.fc14
setroubleshoot-2.2.102-1.fc14 has been pushed to the Fedora 14 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update setroubleshoot'. You can provide feedback for this update here: https://admin.fedoraproject.org/updates/setroubleshoot-2.2.102-1.fc14
setroubleshoot-2.2.102-1.fc14 has been pushed to the Fedora 14 stable repository. If problems still persist, please make note of it in this bug report.