libreport version: 2.0.10 executable: /usr/bin/python2.7 hashmarkername: setroubleshoot kernel: 3.4.4-5.fc17.x86_64 time: Пн. 16 июля 2012 09:20:02 description: Binary file, 2750 bytes
Created attachment 598370 [details] File: description
Did you need to switch to permissive mode to make this working? What does # ausearch -m avc |grep thumb_t
type=SYSCALL msg=audit(1342288108.659:89): arch=c000003e syscall=6 success=yes exit=0 a0=eeeb00 a1=7fffaacfe930 a2=7fffaacfe930 a3=edd9dc items=0 ppid=32133 pid=32503 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="evince-thumbnai" exe="/usr/bin/evince-thumbnailer" subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1342288108.659:89): avc: denied { dac_override } for pid=32503 comm="evince-thumbnai" capability=1 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1342288110.426:90): arch=c000003e syscall=83 success=yes exit=0 a0=196bbe0 a1=1c0 a2=ffffffffffffff80 a3=3e75458739 items=0 ppid=32516 pid=32517 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="gst-plugin-scan" exe="/usr/libexec/gstreamer-0.10/gst-plugin-scanner" subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1342288110.426:90): avc: denied { create } for pid=32517 comm="gst-plugin-scan" name=".orc" scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=dir type=AVC msg=audit(1342288110.426:90): avc: denied { add_name } for pid=32517 comm="gst-plugin-scan" name=".orc" scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir type=AVC msg=audit(1342288110.426:90): avc: denied { write } for pid=32517 comm="gst-plugin-scan" name="root" dev="sda5" ino=16388 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir type=SYSCALL msg=audit(1342288110.426:91): arch=c000003e syscall=2 success=yes exit=6 a0=196bc00 a1=c2 a2=180 a3=2fdbcffdc9 items=0 ppid=32516 pid=32517 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="gst-plugin-scan" exe="/usr/libexec/gstreamer-0.10/gst-plugin-scanner" subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1342288110.426:91): avc: denied { write } for pid=32517 comm="gst-plugin-scan" name="orcexec.Ehhu0w" dev="sda5" ino=1186177 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file type=AVC msg=audit(1342288110.426:91): avc: denied { create } for pid=32517 comm="gst-plugin-scan" name="orcexec.Ehhu0w" scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file type=AVC msg=audit(1342288110.426:91): avc: denied { add_name } for pid=32517 comm="gst-plugin-scan" name="orcexec.Ehhu0w" scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=dir type=AVC msg=audit(1342288110.426:91): avc: denied { write } for pid=32517 comm="gst-plugin-scan" name=".orc" dev="sda5" ino=1186176 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=dir type=SYSCALL msg=audit(1342288110.427:92): arch=c000003e syscall=87 success=yes exit=0 a0=196bc00 a1=0 a2=2 a3=2fdbcffdc9 items=0 ppid=32516 pid=32517 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="gst-plugin-scan" exe="/usr/libexec/gstreamer-0.10/gst-plugin-scanner" subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1342288110.427:92): avc: denied { unlink } for pid=32517 comm="gst-plugin-scan" name="orcexec.Ehhu0w" dev="sda5" ino=1186177 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file type=AVC msg=audit(1342288110.427:92): avc: denied { remove_name } for pid=32517 comm="gst-plugin-scan" name="orcexec.Ehhu0w" dev="sda5" ino=1186177 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=dir type=SYSCALL msg=audit(1342288110.429:93): arch=c000003e syscall=9 success=yes exit=139962877599744 a0=0 a1=10000 a2=5 a3=1 items=0 ppid=32516 pid=32517 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="gst-plugin-scan" exe="/usr/libexec/gstreamer-0.10/gst-plugin-scanner" subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1342288110.429:93): avc: denied { execute } for pid=32517 comm="gst-plugin-scan" path=2F726F6F742F2E6F72632F6F7263657865632E456868753077202864656C6574656429 dev="sda5" ino=1186177 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file type=SYSCALL msg=audit(1342288111.603:95): arch=c000003e syscall=91 success=yes exit=0 a0=a a1=1b6 a2=1b6 a3=7f4b8becca8f items=0 ppid=32516 pid=32517 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="gst-plugin-scan" exe="/usr/libexec/gstreamer-0.10/gst-plugin-scanner" subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1342288111.603:95): avc: denied { fsetid } for pid=32517 comm="gst-plugin-scan" capability=4 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tclass=capability type=AVC msg=audit(1342288111.603:95): avc: denied { fowner } for pid=32517 comm="gst-plugin-scan" capability=3 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tclass=capability type=AVC msg=audit(1342288111.603:95): avc: denied { setattr } for pid=32517 comm="gst-plugin-scan" name="ParseLock000" dev="tmpfs" ino=15358 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_tmpfs_t:s0 tclass=file type=SYSCALL msg=audit(1342288113.253:100): arch=c000003e syscall=87 success=yes exit=0 a0=7f7f30019f90 a1=0 a2=0 a3=2fd602ef09 items=0 ppid=32133 pid=32702 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="multiqueue0:src" exe="/usr/bin/totem-video-thumbnailer" subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1342288113.253:100): avc: denied { unlink } for pid=32702 comm="multiqueue0:src" name="orcexec.BtF7pq" dev="sda5" ino=1186179 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file type=SYSCALL msg=audit(1342288113.253:101): arch=c000003e syscall=9 success=yes exit=140184114483200 a0=0 a1=10000 a2=5 a3=1 items=0 ppid=32133 pid=32702 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="multiqueue0:src" exe="/usr/bin/totem-video-thumbnailer" subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1342288113.253:101): avc: denied { execute } for pid=32702 comm="multiqueue0:src" path=2F726F6F742F2E6F72632F6F7263657865632E427446377071202864656C6574656429 dev="sda5" ino=1186179 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file type=SYSCALL msg=audit(1342288111.602:94): arch=c000003e syscall=2 success=yes exit=10 a0=7fff8b4eb0a0 a1=42 a2=1b6 a3=7f4b8becca8f items=0 ppid=32516 pid=32517 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="gst-plugin-scan" exe="/usr/libexec/gstreamer-0.10/gst-plugin-scanner" subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1342288111.602:94): avc: denied { write } for pid=32517 comm="gst-plugin-scan" name="ParseLock000" dev="tmpfs" ino=15358 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_tmpfs_t:s0 tclass=file type=SYSCALL msg=audit(1342288111.675:96): arch=c000003e syscall=149 success=yes exit=0 a0=7f4babde9000 a1=1000 a2=7fff8b4eb54c a3=1 items=0 ppid=32516 pid=32517 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="gst-plugin-scan" exe="/usr/libexec/gstreamer-0.10/gst-plugin-scanner" subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1342288111.675:96): avc: denied { ipc_lock } for pid=32517 comm="gst-plugin-scan" capability=14 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1342288112.932:97): arch=c000003e syscall=83 success=yes exit=0 a0=d3b120 a1=1ff a2=2 a3=16 items=0 ppid=32133 pid=32516 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="totem-video-thu" exe="/usr/bin/totem-video-thumbnailer" subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1342288112.932:97): avc: denied { create } for pid=32516 comm="totem-video-thu" name=".gstreamer-0.10" scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=dir type=SYSCALL msg=audit(1342288112.932:98): arch=c000003e syscall=2 success=yes exit=3 a0=cf5bc0 a1=c2 a2=180 a3=1 items=0 ppid=32133 pid=32516 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="totem-video-thu" exe="/usr/bin/totem-video-thumbnailer" subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1342288112.932:98): avc: denied { write } for pid=32516 comm="totem-video-thu" name="registry.x86_64.bin.tmpOSNZHW" dev="sda5" ino=1186178 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file type=AVC msg=audit(1342288112.932:98): avc: denied { create } for pid=32516 comm="totem-video-thu" name="registry.x86_64.bin.tmpOSNZHW" scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file type=AVC msg=audit(1342288112.932:98): avc: denied { add_name } for pid=32516 comm="totem-video-thu" name="registry.x86_64.bin.tmpOSNZHW" scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=dir type=AVC msg=audit(1342288112.932:98): avc: denied { write } for pid=32516 comm="totem-video-thu" name=".gstreamer-0.10" dev="sda5" ino=1186177 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=dir type=SYSCALL msg=audit(1342288113.068:99): arch=c000003e syscall=82 success=yes exit=0 a0=cf5bc0 a1=a9eae0 a2=c28220 a3=33 items=0 ppid=32133 pid=32516 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="totem-video-thu" exe="/usr/bin/totem-video-thumbnailer" subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1342288113.068:99): avc: denied { rename } for pid=32516 comm="totem-video-thu" name="registry.x86_64.bin.tmpOSNZHW" dev="sda5" ino=1186178 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file type=AVC msg=audit(1342288113.068:99): avc: denied { remove_name } for pid=32516 comm="totem-video-thu" name="registry.x86_64.bin.tmpOSNZHW" dev="sda5" ino=1186178 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=dir
Running nautilus and thumbnailers as root is very dangerous and not something we are going to allow. dac_override means that ownership/Permission flags will be ignored. Not something we want to give thumbnailers.