Hide Forgot
Summary: SELinux is preventing /usr/bin/evolution "getattr" access on unix_stream_socket. Detailed Description: SELinux denied access requested by evolution. It is not expected that this access is required by evolution and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access: You can generate a local policy module to allow this access - see FAQ (http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug report. Additional Information: Source Context user_u:user_r:user_t:s0 Target Context user_u:user_r:gpg_agent_t:s0 Target Objects unix_stream_socket [ unix_stream_socket ] Source evolution Source Path /usr/bin/evolution Port <Unknown> Host (removed) Source RPM Packages evolution-2.30.3-1.fc13 Target RPM Packages Policy RPM selinux-policy-3.7.19-76.fc13 Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Plugin Name catchall Host Name (removed) Platform Linux (removed) 2.6.34.7-66.fc13.i686 #1 SMP Wed Dec 15 07:40:25 UTC 2010 i686 i686 Alert Count 8 First Seen Thu 06 Jan 2011 08:39:43 AM EST Last Seen Thu 06 Jan 2011 08:39:43 AM EST Local ID 6517c143-e575-451f-90a7-d632fed98976 Line Numbers Raw Audit Messages node=(removed) type=AVC msg=audit(1294321183.469:9059): avc: denied { getattr } for pid=14516 comm="evolution" path="socket:[24629]" dev=sockfs ino=24629 scontext=user_u:user_r:user_t:s0 tcontext=user_u:user_r:gpg_agent_t:s0 tclass=unix_stream_socket node=(removed) type=SYSCALL msg=audit(1294321183.469:9059): arch=40000003 syscall=195 success=no exit=-13 a0=1ad22ca8 a1=b06fcb7c a2=bf5ff4 a3=3 items=0 ppid=4711 pid=14516 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=6 comm="evolution" exe="/usr/bin/evolution" subj=user_u:user_r:user_t:s0 key=(null) Hash String generated from catchall,evolution,user_t,gpg_agent_t,unix_stream_socket,getattr audit2allow suggests: #============= user_t ============== allow user_t gpg_agent_t:unix_stream_socket getattr;
Evolution must be doing something strange going through /proc on the user account?