libreport version: 2.0.8
executable:     /usr/bin/python
hashmarkername: setroubleshoot
kernel:         3.3.0-0.rc3.git3.1.fc17.x86_64
reason:         SELinux is preventing /usr/sbin/clamd from 'remove_name' accesses on the dossier clamd.pid.
time:           sam. 11 févr. 2012 21:41:06 CET

description:
:SELinux is preventing /usr/sbin/clamd from 'remove_name' accesses on the dossier clamd.pid.
:
:*****  Plugin catchall (100. confidence) suggests  ***************************
:
:If you believe that clamd should be allowed remove_name access on the clamd.pid directory by default.
:Then you should report this as a bug.
:You can generate a local policy module to allow this access.
:Do
:allow this access for now by executing:
:# grep clamd /var/log/audit/audit.log | audit2allow -M mypol
:# semodule -i mypol.pp
:
:Additional Information:
:Source Context                system_u:system_r:clamd_t:s0
:Target Context                system_u:object_r:amavis_var_run_t:s0
:Target Objects                clamd.pid [ dir ]
:Source                        clamd
:Source Path                   /usr/sbin/clamd
:Port                          <Inconnu>
:Host                          (removed)
:Source RPM Packages           clamav-server-0.97.3-1703.fc17.x86_64
:Target RPM Packages           
:Policy RPM                    selinux-policy-3.10.0-86.fc17.noarch
:Selinux Enabled               True
:Policy Type                   targeted
:Enforcing Mode                Permissive
:Host Name                     (removed)
:Platform                      Linux (removed) 3.3.0-0.rc3.git3.1.fc17.x86_64 #1
:                              SMP Sat Feb 11 14:13:53 UTC 2012 x86_64 x86_64
:Alert Count                   1
:First Seen                    sam. 11 févr. 2012 21:00:35 CET
:Last Seen                     sam. 11 févr. 2012 21:00:35 CET
:Local ID                      b261d867-eddc-4f07-b35f-b785518710b9
:
:Raw Audit Messages
:type=AVC msg=audit(1328990435.591:140): avc:  denied  { remove_name } for  pid=954 comm="clamd" name="clamd.pid" dev="tmpfs" ino=20446 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:amavis_var_run_t:s0 tclass=dir
:
:
:type=AVC msg=audit(1328990435.591:140): avc:  denied  { unlink } for  pid=954 comm="clamd" name="clamd.pid" dev="tmpfs" ino=20446 scontext=system_u:system_r:clamd_t:s0 tcontext=system_u:object_r:amavis_var_run_t:s0 tclass=file
:
:
:type=SYSCALL msg=audit(1328990435.591:140): arch=x86_64 syscall=unlink success=yes exit=0 a0=1308480 a1=419af3 a2=7 a3=3cdb739480 items=0 ppid=1 pid=954 auid=4294967295 uid=490 gid=485 euid=490 suid=490 fsuid=490 egid=485 sgid=485 fsgid=485 tty=(none) ses=4294967295 comm=clamd exe=/usr/sbin/clamd subj=system_u:system_r:clamd_t:s0 key=(null)
:
:Hash: clamd,clamd_t,amavis_var_run_t,dir,remove_name
:
:audit2allow
:
:#============= clamd_t ==============
:allow clamd_t amavis_var_run_t:dir remove_name;
:allow clamd_t amavis_var_run_t:file unlink;
:
:audit2allow -R
:
:#============= clamd_t ==============
:allow clamd_t amavis_var_run_t:dir remove_name;
:allow clamd_t amavis_var_run_t:file unlink;
: