Description of problem: 1. Configure Gnome3 for online accounts. I have Gmail and IRC configured. 2. Change login account from unconfined_u to staff_u selinux user 3. Reboot 4. Experience error I tried restorecon but it did not change the context of the file. With the error the online accounts will not sign in. Additional info: libreport version: 2.0.14 kernel: 3.5.6-1.fc17.x86_64 description: :SELinux is preventing /usr/libexec/telepathy-idle from 'read' accesses on the file /usr/share/glib-2.0/schemas/gschemas.compiled. : :***** Plugin catchall_labels (83.8 confidence) suggests ******************** : :If you want to allow telepathy-idle to have read access on the gschemas.compiled file :Then you need to change the label on /usr/share/glib-2.0/schemas/gschemas.compiled :Do :# semanage fcontext -a -t FILE_TYPE '/usr/share/glib-2.0/schemas/gschemas.compiled' :where FILE_TYPE is one of the following: textrel_shlib_t, etc_t, cert_t, rpm_script_tmp_t, locale_t, proc_t, ld_so_cache_t, user_cron_spool_t, sssd_public_t, machineid_t, etc_t, abrt_var_run_t, telepathy_idle_exec_t, passwd_file_t, krb5_conf_t, telepathy_idle_t, sysctl_crypto_t, cache_home_t, samba_var_t, samba_etc_t, net_conf_t, abrt_t, ld_so_t, lib_t, cpu_online_t, afs_cache_t, abrt_helper_exec_t. :Then execute: :restorecon -v '/usr/share/glib-2.0/schemas/gschemas.compiled' : : :***** Plugin catchall (17.1 confidence) suggests *************************** : :If you believe that telepathy-idle should be allowed read access on the gschemas.compiled file by default. :Then you should report this as a bug. :You can generate a local policy module to allow this access. :Do :allow this access for now by executing: :# grep telepathy-idle /var/log/audit/audit.log | audit2allow -M mypol :# semodule -i mypol.pp : :Additional Information: :Source Context staff_u:staff_r:telepathy_idle_t:SystemLow- : SystemHigh :Target Context system_u:object_r:usr_t:SystemLow :Target Objects /usr/share/glib-2.0/schemas/gschemas.compiled [ : file ] :Source telepathy-idle :Source Path /usr/libexec/telepathy-idle :Port <Unknown> :Host (removed) :Source RPM Packages telepathy-idle-0.1.12-1.fc17.x86_64 :Target RPM Packages :Policy RPM selinux-policy-3.10.0-149.fc17.noarch :Selinux Enabled True :Policy Type targeted :Enforcing Mode Enforcing :Host Name (removed) :Platform Linux (removed) 3.5.6-1.fc17.x86_64 #1 SMP Sun Oct : 7 19:31:14 UTC 2012 x86_64 x86_64 :Alert Count 5 :First Seen 2012-10-11 22:04:14 EDT :Last Seen 2012-10-11 22:08:42 EDT :Local ID 3495755b-eaea-43ee-aaa7-0465df95c42e : :Raw Audit Messages :type=AVC msg=audit(1350007722.765:103): avc: denied { read } for pid=1990 comm="telepathy-idle" name="gschemas.compiled" dev="sda3" ino=49561 scontext=staff_u:staff_r:telepathy_idle_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file : : :type=SYSCALL msg=audit(1350007722.765:103): arch=x86_64 syscall=open success=no exit=EACCES a0=6e5660 a1=0 a2=0 a3=0 items=0 ppid=1 pid=1990 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=2 comm=telepathy-idle exe=/usr/libexec/telepathy-idle subj=staff_u:staff_r:telepathy_idle_t:s0-s0:c0.c1023 key=(null) : :Hash: telepathy-idle,telepathy_idle_t,usr_t,file,read : :audit2allow : :#============= telepathy_idle_t ============== :allow telepathy_idle_t usr_t:file read; : :audit2allow -R : :#============= telepathy_idle_t ============== :allow telepathy_idle_t usr_t:file read; :
Created attachment 625773 [details] File: type
Created attachment 625774 [details] File: hashmarkername
3665b759c3a35487de662cdbe2732bfefdf73583 needs back port to F17
selinux-policy-3.10.0-156.fc17 has been submitted as an update for Fedora 17. https://admin.fedoraproject.org/updates/selinux-policy-3.10.0-156.fc17
Package selinux-policy-3.10.0-156.fc17: * should fix your issue, * was pushed to the Fedora 17 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.10.0-156.fc17' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-16347/selinux-policy-3.10.0-156.fc17 then log in and leave karma (feedback).
selinux-policy-3.10.0-156.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report.