libreport version: 2.0.8
executable:     /usr/bin/python
hashmarkername: setroubleshoot
kernel:         3.3.0-0.rc3.git2.2.fc18.x86_64
reason:         SELinux is preventing /usr/sbin/clamd from 'search' accesses on the dossier amavisd.
time:           sam. 11 févr. 2012 15:06:38 CET

description:
:SELinux is preventing /usr/sbin/clamd from 'search' accesses on the dossier amavisd.
:
:*****  Plugin catchall (100. confidence) suggests  ***************************
:
:If you believe that clamd should be allowed search access on the amavisd directory by default.
:Then you should report this as a bug.
:You can generate a local policy module to allow this access.
:Do
:allow this access for now by executing:
:# grep clamd /var/log/audit/audit.log | audit2allow -M mypol
:# semodule -i mypol.pp
:
:Additional Information:
:Source Context                system_u:system_r:clamd_t:s0
:Target Context                system_u:object_r:amavis_var_run_t:s0
:Target Objects                amavisd [ dir ]
:Source                        clamd
:Source Path                   /usr/sbin/clamd
:Port                          <Inconnu>
:Host                          (removed)
:Source RPM Packages           clamav-server-0.97.3-1703.fc17.x86_64
:Target RPM Packages           
:Policy RPM                    selinux-policy-3.10.0-86.fc17.noarch
:Selinux Enabled               True
:Policy Type                   targeted
:Enforcing Mode                Permissive
:Host Name                     (removed)
:Platform                      Linux (removed) 3.3.0-0.rc3.git2.2.fc18.x86_64 #1
:                              SMP Fri Feb 10 21:52:06 UTC 2012 x86_64 x86_64
:Alert Count                   3
:First Seen                    sam. 11 févr. 2012 13:28:49 CET
:Last Seen                     sam. 11 févr. 2012 13:31:31 CET
:Local ID                      f8bc3473-ed98-4e3f-ab01-f9d922b521ab
:
:Raw Audit Messages
:type=AVC msg=audit(1328963491.999:60): avc:  denied  { search } for  pid=942 comm="clamd" name="amavisd" dev="tmpfs" ino=14413 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:amavis_var_run_t:s0 tclass=dirnode=(removed) type=AVC msg=audit(1328963491.999:60): avc:  denied  { write } for  pid=942 comm="clamd" name="amavisd" dev="tmpfs" ino=14413 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:amavis_var_run_t:s0 tclass=dir
:
:
:type=AVC msg=audit(1328963491.999:60): avc:  denied  { add_name } for  pid=942 comm="clamd" name="clamd.pid" scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:amavis_var_run_t:s0 tclass=dir
:
:
:type=AVC msg=audit(1328963491.999:60): avc:  denied  { write } for  pid=942 comm="clamd" name="clamd.pid" dev="tmpfs" ino=22152 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:amavis_var_run_t:s0 tclass=file
:
:
:type=SYSCALL msg=audit(1328963491.999:60): arch=x86_64 syscall=open success=yes exit=EIO a0=24df480 a1=241 a2=1b6 a3=238 items=0 ppid=1 pid=942 auid=4294967295 uid=490 gid=485 euid=490 suid=490 fsuid=490 egid=485 sgid=485 fsgid=485 tty=(none) ses=4294967295 comm=clamd exe=/usr/sbin/clamd subj=system_u:system_r:clamd_t:s0 key=(null)
:
:Hash: clamd,clamd_t,amavis_var_run_t,dir,search
:
:audit2allow
:
:#============= clamd_t ==============
:#!!!! The source type 'clamd_t' can write to a 'dir' of the following types:
:# clamd_var_log_t, clamd_var_lib_t, clamd_var_run_t, clamd_tmp_t, amavis_spool_t, tmp_t, var_run_t, var_log_t, root_t
:
:allow clamd_t amavis_var_run_t:dir { write search add_name };
:allow clamd_t amavis_var_run_t:file write;
:
:audit2allow -R
:
:#============= clamd_t ==============
:#!!!! The source type 'clamd_t' can write to a 'dir' of the following types:
:# clamd_var_log_t, clamd_var_lib_t, clamd_var_run_t, clamd_tmp_t, amavis_spool_t, tmp_t, var_run_t, var_log_t, root_t
:
:allow clamd_t amavis_var_run_t:dir { write search add_name };
:allow clamd_t amavis_var_run_t:file write;
: