Bug 766032 - SELinux is preventing /usr/libexec/colord from 'read' accesses on the file /var/lib/iscan/interpreter.
Summary: SELinux is preventing /usr/libexec/colord from 'read' accesses on the file /v...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 16
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:bbc951fe8096a7628480f292c22...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-12-09 21:30 UTC by Robert Kief
Modified: 2012-01-11 06:18 UTC (History)
4 users (show)

Fixed In Version: selinux-policy-3.10.0-71.fc16
Clone Of:
Environment:
Last Closed: 2012-01-11 06:18:16 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: description (3.25 KB, text/plain)
2011-12-09 21:30 UTC, Robert Kief
no flags Details

Description Robert Kief 2011-12-09 21:30:05 UTC
libreport version: 2.0.7
executable:     /usr/bin/python
hashmarkername: setroubleshoot
kernel:         3.1.4-1.fc16.x86_64
reason:         SELinux is preventing /usr/libexec/colord from 'read' accesses on the file /var/lib/iscan/interpreter.
time:           Fri 09 Dec 2011 03:29:32 PM CST

description:    Text file, 3328 bytes

Comment 1 Robert Kief 2011-12-09 21:30:08 UTC
Created attachment 544713 [details]
File: description

Comment 2 Miroslav Grepl 2011-12-12 12:32:18 UTC
Try to execute

# chcon -t bin_t /var/lib/iscan/interpreter

and re-test it. Thank you.

Comment 3 Robert Kief 2011-12-12 17:05:12 UTC
I executed the requested command and restarted my computer.  As I didn't actually do anything, that I'm aware of, to cause the original SELinux error, all I can do now is wait to see if it reappears.  Most of the time, the error would appear after a restart, but not always.  I will inform you if the error message reappears.

RLK

Comment 4 Daniel Walsh 2011-12-13 19:58:16 UTC
Could you check if other executables are in this directory?

ls -l /var/lib/iscan

Comment 5 Robert Kief 2011-12-13 21:01:18 UTC
Running ls -l /var/lib/iscan results in:

total 4
-rw-r--r--. 1 root root 86 Nov 15 20:28 interpreter

The colord error message has not reoccurred.

RLK

Comment 6 Robert Kief 2011-12-28 18:37:33 UTC
This bug has not cleared from the SELinux Troubleshooter in my computer.  All other bugs have cleared.  Does this mean that it is still open and active?  I have this bug set to notify, not to ignore.

Thank you,

RLK

Comment 7 Daniel Walsh 2011-12-29 18:20:03 UTC
Should  be fixed in selinux-policy-3.10.0-69.fc16 or perhaps earlier.

matchpathcon /var/lib/iscan/interpreter
/var/lib/iscan/interpreter	system_u:object_r:bin_t:s0

Comment 8 Fedora Update System 2012-01-03 23:47:47 UTC
selinux-policy-3.10.0-71.fc16 has been submitted as an update for Fedora 16.
https://admin.fedoraproject.org/updates/selinux-policy-3.10.0-71.fc16

Comment 9 Fedora Update System 2012-01-05 21:08:05 UTC
Package selinux-policy-3.10.0-71.fc16:
* should fix your issue,
* was pushed to the Fedora 16 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing selinux-policy-3.10.0-71.fc16'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-0154/selinux-policy-3.10.0-71.fc16
then log in and leave karma (feedback).

Comment 10 Robert Kief 2012-01-07 16:10:29 UTC
I just finished installing selinux-policy-3.10.0-71.fc16 as requested in Comment 9.  I have this bug set to "Notify" in the SELinux Troubleshooter and will advise if there are any issues.  I will do a restart as soon as I finish this comment.

Thank you,

RLK

Comment 11 Fedora Update System 2012-01-11 06:18:16 UTC
selinux-policy-3.10.0-71.fc16 has been pushed to the Fedora 16 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.