Bug 647982 - SELinux is preventing /usr/sbin/abrtd "create" access on
Summary: SELinux is preventing /usr/sbin/abrtd "create" access on
Keywords:
Status: CLOSED WORKSFORME
Alias: None
Product: Fedora
Classification: Fedora
Component: abrt
Version: 13
Hardware: x86_64
OS: Linux
low
medium
Target Milestone: ---
Assignee: Jiri Moskovcak
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-10-30 09:31 UTC by Minnikhanov
Modified: 2015-02-01 22:53 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-11-01 19:28:44 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Minnikhanov 2010-10-30 09:31:17 UTC
Description of problem:
setroubleshoot show message: 
SELinux is preventing /usr/sbin/abrtd "create" access on
ccpp-1283357585-2597.lock.


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. boot
2. look message.log
3.
  
Actual results:
abrtd don't run

Expected results:


Additional info:

message.log >>>
Oct 30 09:12:47 lhost abrtd: Registered Analyzer plugin 'Python'
Oct 30 09:12:47 lhost abrtd: Registered Analyzer plugin 'Kerneloops'
Oct 30 09:12:47 lhost abrtd: Registered Reporter plugin 'Logger'
Oct 30 09:12:47 lhost abrtd: Registered Reporter plugin 'Bugzilla'
Oct 30 09:12:47 lhost abrtd: Registered Reporter plugin 'KerneloopsReporter'
Oct 30 09:12:47 lhost abrtd: Registered Action plugin 'KerneloopsScanner'
Oct 30 09:12:47 lhost abrtd: Registered Analyzer plugin 'CCpp'
Oct 30 09:12:47 lhost abrtd: Checking for unsaved crashes (dirs to check:1)
Oct 30 09:12:47 lhost abrtd: Can't create lock file '/var/spool/abrt/ccpp-1283357585-2597.lock': Отказано в доступе
Oct 30 09:12:50 lhost setroubleshoot: [xml.ERROR] read_xml_file() libxml2.parserError: xmlParseFile() failed
Oct 30 09:12:50 lhost smartd[1739]: smartd 5.39.1 2010-01-28 r3054 [x86_64-redhat-linux-gnu] (local build)#012Copyright (C) 2002-10 by Bruce Allen, http://smartmontools.sourceforge.net#012
Oct 30 09:12:50 lhost smartd[1739]: Opened configuration file /etc/smartd.conf
Oct 30 09:12:50 lhost smartd[1739]: Configuration file /etc/smartd.conf was parsed, found DEVICESCAN, scanning devices
Oct 30 09:12:50 lhost smartd[1739]: Device: /dev/sda, type changed from 'scsi' to 'sat'
Oct 30 09:12:50 lhost smartd[1739]: Device: /dev/sda [SAT], opened
Oct 30 09:12:50 lhost smartd[1739]: Device: /dev/sda [SAT], found in smartd database.
Oct 30 09:12:51 lhost smartd[1739]: Device: /dev/sda [SAT], is SMART capable. Adding to "monitor" list.
Oct 30 09:12:51 lhost smartd[1739]: Device: /dev/sdb, type changed from 'scsi' to 'sat'
Oct 30 09:12:51 lhost smartd[1739]: Device: /dev/sdb [SAT], opened
Oct 30 09:12:51 lhost smartd[1739]: Device: /dev/sdb [SAT], found in smartd database.
Oct 30 09:12:51 lhost smartd[1739]: Device: /dev/sdb [SAT], is SMART capable. Adding to "monitor" list.
Oct 30 09:12:51 lhost smartd[1739]: Device: /dev/sdc, type changed from 'scsi' to 'sat'
Oct 30 09:12:51 lhost smartd[1739]: Device: /dev/sdc [SAT], opened
Oct 30 09:12:51 lhost smartd[1739]: Device: /dev/sdc [SAT], not found in smartd database.
Oct 30 09:12:51 lhost smartd[1739]: Device: /dev/sdc [SAT], is SMART capable. Adding to "monitor" list.
Oct 30 09:12:51 lhost smartd[1739]: Monitoring 3 ATA and 0 SCSI devices
Oct 30 09:12:52 lhost smartd[1742]: smartd has fork()ed into background mode. New PID=1742.
Oct 30 09:12:53 lhost setroubleshoot: SELinux deny /usr/sbin/abrtd acceses «create». on ccpp-1283357585-2597.lock. For complete SELinux messages. run sealert -l 8bc59a35-169e-4b58-a4d6-c27ea9053151

<<<

sealert -l 8bc59a35-169e-4b58-a4d6-c27ea9053151 >>>

[root@lhost bbb]# sealert -l 8bc59a35-169e-4b58-a4d6-c27ea9053151
query_alerts error (1003): id (8bc59a35-169e-4b58-a4d6-c27ea9053151) not found
[root@lhost bbb]# 

After command above at message.log IT SEEMS putted this message:
Oct 30 09:25:24 lhost setroubleshoot: [xml.ERROR] read_xml_file() libxml2.parserError: xmlParseFile() failed

<<<

>>>
[root@lhost bbb]# ls -al /var/spool/abrt/
total 16
drwxr-xr-x.  3 abrt abrt 4096 Sep  1 20:13 .
drwxr-xr-x. 15 root root 4096 Aug 23 21:28 ..
drwxr-x---.  2 abrt bbb  4096 Sep  1 20:13 ccpp-1283357585-2597
-rw-------.  1 root root   23 Sep  1 20:13 last-ccpp
[root@lhost bbb]#
<<<

Comment 1 Minnikhanov 2010-11-01 19:27:11 UTC
Solved. After relabel SELinux by 
Daniel Walsh 2010-11-01 10:22:56 EDT Comment 6 BUG 647984
https://bugzilla.redhat.com/show_bug.cgi?id=647984#c6


Note You need to log in before you can comment on or make changes to this bug.