Bug 760507 - SELinux is preventing /usr/libexec/kde4/kcmdatetimehelper from 'write' accesses on the directory /.kde/share/config.
Summary: SELinux is preventing /usr/libexec/kde4/kcmdatetimehelper from 'write' access...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 16
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:06ae40bccdb2bfa3887323eea37...
Depends On: 757240
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-12-06 11:46 UTC by Giovanni Tirloni
Modified: 2012-12-15 18:55 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-12-15 18:55:50 UTC
Type: ---

Attachments (Terms of Use)
File: description (2.90 KB, text/plain)
2011-12-06 11:46 UTC, Giovanni Tirloni 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Description Giovanni Tirloni 2011-12-06 11:46:40 UTC 
libreport version: 2.0.7
executable:     /usr/bin/python
hashmarkername: setroubleshoot
kernel:         3.1.2-1.fc16.x86_64
reason:         SELinux is preventing /usr/libexec/kde4/kcmdatetimehelper from 'write' accesses on the directory /.kde/share/config.
time:           Tue 06 Dec 2011 09:45:56 AM BRST

description:    Text file, 2969 bytes
Comment 1 Giovanni Tirloni 2011-12-06 11:46:43 UTC 
Created attachment 541314 [details]
File: description
Comment 2 Miroslav Grepl 2011-12-06 13:26:11 UTC 
Try to execute

# chcon -t bin_t /usr/libexec/kde4/kcmdatetimehelper

will turn off the kcmdatetimehelper policy. Please try it and let me know if kcmdatetimehelper works as expected.

Thank you.
Comment 3 Giovanni Tirloni 2011-12-06 13:41:47 UTC 
Now it doesn't complain about not being able to contact the ntp server and no SELinux warning is created but it crashes with the following message:

"Unable to execute the action: 6,"

And the KDE Crash helper pops up.

I verified pool.ntp.org is accessible and can correctly sync time with ntpdate.
Comment 4 Miroslav Grepl 2011-12-06 14:01:52 UTC 
It doesn't look like SELinux issue. If you switch to permissive mode

# setenforce 0

does it work? After that switch back to enforcing mode.

# setenforce 1
Comment 5 Miroslav Grepl 2012-12-15 18:55:50 UTC 
It has been fixed in KDE.
Note You need to log in before you can comment on or make changes to this bug.