Fedora Account System
Red Hat Associate
Red Hat Customer
Description of problem: System Settings -> Region & Language SELinux is preventing /usr/lib/systemd/systemd-localed from 'search' accesses on the directory journal. ***** Plugin catchall (100. confidence) suggests *************************** If you believe that systemd-localed should be allowed search access on the journal directory by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep systemd-localed /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:systemd_localed_t:s0 Target Context system_u:object_r:syslogd_var_run_t:s0 Target Objects journal [ dir ] Source systemd-localed Source Path /usr/lib/systemd/systemd-localed Port <Unknown> Host (removed) Source RPM Packages systemd-197-1.fc18.1.x86_64 Target RPM Packages Policy RPM selinux-policy-3.11.1-79.fc18.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 3.7.9-201.fc18.x86_64 #1 SMP Mon Feb 18 21:07:56 UTC 2013 x86_64 x86_64 Alert Count 1 First Seen 2013-02-21 23:23:03 KST Last Seen 2013-02-21 23:23:03 KST Local ID 6349baf1-138f-4560-a79d-7870e28a89c0 Raw Audit Messages type=AVC msg=audit(1361456583.420:534): avc: denied { search } for pid=6419 comm="systemd-localed" name="journal" dev="tmpfs" ino=6736 scontext=system_u:system_r:systemd_localed_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir type=AVC msg=audit(1361456583.420:534): avc: denied { write } for pid=6419 comm="systemd-localed" name="socket" dev="tmpfs" ino=6739 scontext=system_u:system_r:systemd_localed_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file type=AVC msg=audit(1361456583.420:534): avc: denied { sendto } for pid=6419 comm="systemd-localed" path="/run/systemd/journal/socket" scontext=system_u:system_r:systemd_localed_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket type=SYSCALL msg=audit(1361456583.420:534): arch=x86_64 syscall=connect success=yes exit=0 a0=3 a1=7fff7b6a49a0 a2=1d a3=7fff7b6a4958 items=0 ppid=1 pid=6419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm=systemd-localed exe=/usr/lib/systemd/systemd-localed subj=system_u:system_r:systemd_localed_t:s0 key=(null) Hash: systemd-localed,systemd_localed_t,syslogd_var_run_t,dir,search audit2allow #============= systemd_localed_t ============== allow systemd_localed_t kernel_t:unix_dgram_socket sendto; allow systemd_localed_t syslogd_var_run_t:dir search; allow systemd_localed_t syslogd_var_run_t:sock_file write; audit2allow -R #============= systemd_localed_t ============== allow systemd_localed_t kernel_t:unix_dgram_socket sendto; allow systemd_localed_t syslogd_var_run_t:dir search; allow systemd_localed_t syslogd_var_run_t:sock_file write; Additional info: hashmarkername: setroubleshoot kernel: 3.7.9-201.fc18.x86_64 type: libreport
Fixed in selinux-policy-3.11.1-80.fc18.noarch
selinux-policy-3.11.1-81.fc18 has been submitted as an update for Fedora 18. https://admin.fedoraproject.org/updates/selinux-policy-3.11.1-81.fc18
I've this problem when I open "Region & Language" from Gnome 3 "System Settings". I've solved this issue using "grep systemd-localed /var/log/audit/audit.log | audit2allow -M mypol" and "semodule -i mypol.pp" Package: (null) OS Release: Fedora release 18 (Spherical Cow)
Description of problem: selected language settins in system settings Additional info: hashmarkername: setroubleshoot kernel: 3.7.9-201.fc18.x86_64 type: libreport
selinux-policy-3.11.1-81.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report.