SELinux is preventing /usr/libexec/fprintd from 'read' accesses on the plik /proc/<pid>/cmdline.

*****  Plugin catchall (100. confidence) suggests  ***************************

If aby fprintd powinno mieć domyślnie read dostęp do cmdline file.
Then proszę to zgłosić jako błąd.
Można utworzyć lokalny moduł polityki, aby umożliwić ten dostęp.
Do
można tymczasowo zezwolić na ten dostęp wykonując polecenia:
# grep fprintd /var/log/audit/audit.log | audit2allow -M moja_polityka
# semodule -i moja_polityka.pp

Additional Information:
Source Context                system_u:system_r:fprintd_t:s0-s0:c0.c1023
Target Context                system_u:system_r:xdm_t:s0-s0:c0.c1023
Target Objects                /proc/<pid>/cmdline [ file ]
Source                        fprintd
Source Path                   /usr/libexec/fprintd
Port                          <Nieznane>
Host                          (removed)
Source RPM Packages           fprintd-0.2.0-3.fc15
Target RPM Packages           
Policy RPM                    selinux-policy-3.9.16-35.fc15
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 2.6.40.3-0.fc15.x86_64 #1 SMP Tue Aug
                              16 04:10:59 UTC 2011 x86_64 x86_64
Alert Count                   19
First Seen                    czw, 25 sie 2011, 06:30:21
Last Seen                     nie, 4 wrz 2011, 22:07:36
Local ID                      bfffda5f-fadd-4174-920f-027e17d9010e

Raw Audit Messages
type=AVC msg=audit(1315166856.294:276): avc:  denied  { read } for  pid=9849 comm="fprintd" path="/proc/9565/cmdline" dev=proc ino=291270 scontext=system_u:system_r:fprintd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=file


type=SYSCALL msg=audit(1315166856.294:276): arch=x86_64 syscall=execve success=yes exit=0 a0=1629780 a1=16296a0 a2=1628010 a3=0 items=0 ppid=9848 pid=9849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=fprintd exe=/usr/libexec/fprintd subj=system_u:system_r:fprintd_t:s0-s0:c0.c1023 key=(null)

Hash: fprintd,fprintd_t,xdm_t,file,read

audit2allow

#============= fprintd_t ==============
allow fprintd_t xdm_t:file read;

audit2allow -R

#============= fprintd_t ==============
allow fprintd_t xdm_t:file read;