Bug 917610 - SELinux is preventing /usr/lib/sa/sadc from 'read' accesses on the file sa05.
Summary: SELinux is preventing /usr/lib/sa/sadc from 'read' accesses on the file sa05.
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: rawhide
Hardware: i686
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:285352820bc76350e27ce6c91c7...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-03-04 12:01 UTC by Christopher Meng
Modified: 2013-03-07 10:06 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2013-03-05 18:30:23 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)
ausearch -m avc -ts recent (2.87 KB, text/x-log)
2013-03-05 13:17 UTC, Christopher Meng 		no flags Details
View All

Description Christopher Meng 2013-03-04 12:01:27 UTC 
Additional info:
hashmarkername: setroubleshoot
kernel:         3.9.0-0.rc0.git14.1.fc19.i686.PAE
type:           libreport
Comment 1 Daniel Walsh 2013-03-04 14:54:12 UTC 
Could you attach the avc messages

ausearch -m avc -ts recent
Comment 2 Christopher Meng 2013-03-05 13:17:58 UTC 
Created attachment 705424 [details]
ausearch -m avc -ts recent
Comment 3 Daniel Walsh 2013-03-05 18:30:23 UTC 
Fixed in selinux-policy-3.12.1-18.fc19
Comment 4 Christopher Meng 2013-03-06 03:55:10 UTC 
Tell me the theory OK??
Comment 5 Daniel Walsh 2013-03-06 17:21:39 UTC 
Basically I am now allowing sadc to manage its own log files, before is was only allowed to create and append to them.
Comment 6 Miroslav Grepl 2013-03-07 10:06:25 UTC 
Yes, which has been adopted from upstream policy.
Note You need to log in before you can comment on or make changes to this bug.