Bug 919554 - SELinux is preventing /usr/lib/systemd/systemd-localed from 'create' accesses on the file .00-keyboard.confp3FGHB.
Summary: SELinux is preventing /usr/lib/systemd/systemd-localed from 'create' accesses...
Keywords:
Status: CLOSED DUPLICATE of bug 919555
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 18
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:1b4d9e0befb87dce65daf6c1281...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-03-08 19:10 UTC by Gustavo Maciel Dias Vieira
Modified: 2013-03-08 21:26 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-03-08 21:26:30 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Gustavo Maciel Dias Vieira 2013-03-08 19:10:27 UTC
Description of problem:
When setting locale and language system-wide.
SELinux is preventing /usr/lib/systemd/systemd-localed from 'create' accesses on the file .00-keyboard.confp3FGHB.

*****  Plugin catchall_labels (83.8 confidence) suggests  ********************

If you want to allow systemd-localed to have create access on the .00-keyboard.confp3FGHB file
Then você precisará mudar o rótulo em .00-keyboard.confp3FGHB
Do
# semanage fcontext -a -t FILE_TYPE '.00-keyboard.confp3FGHB'
onde FILE_TYPE é um dos seguintes: locale_t. 
Então execute: 
restorecon -v '.00-keyboard.confp3FGHB'


*****  Plugin catchall (17.1 confidence) suggests  ***************************

If você acredita que o systemd-localed deva ser permitido acesso de create em .00-keyboard.confp3FGHB file  por default.
Then você precisa reportar este como um erro.
Você pode gerar um módulo de política local para permitir este acesso.
Do
permitir este acesso agora executando:
# grep systemd-localed /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                system_u:system_r:systemd_localed_t:s0
Target Context                system_u:object_r:etc_t:s0
Target Objects                .00-keyboard.confp3FGHB [ file ]
Source                        systemd-localed
Source Path                   /usr/lib/systemd/systemd-localed
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           systemd-197-1.fc18.2.x86_64
Target RPM Packages           
Policy RPM                    selinux-policy-3.11.1-84.fc18.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 3.8.1-201.fc18.x86_64 #1 SMP Thu
                              Feb 28 19:23:08 UTC 2013 x86_64 x86_64
Alert Count                   1
First Seen                    2013-03-08 16:00:51 BRT
Last Seen                     2013-03-08 16:00:51 BRT
Local ID                      ad9c9c00-b9c7-4d8f-aacf-0a24e0c8714d

Raw Audit Messages
type=AVC msg=audit(1362769251.454:375): avc:  denied  { create } for  pid=3651 comm="systemd-localed" name=".00-keyboard.confp3FGHB" scontext=system_u:system_r:systemd_localed_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file


type=AVC msg=audit(1362769251.454:375): avc:  denied  { write } for  pid=3651 comm="systemd-localed" path="/etc/X11/xorg.conf.d/.00-keyboard.confp3FGHB" dev="sda6" ino=701199 scontext=system_u:system_r:systemd_localed_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file


type=SYSCALL msg=audit(1362769251.454:375): arch=x86_64 syscall=open success=yes exit=EIO a0=7f5ba8b936c0 a1=800c2 a2=180 a3=fe11552a1 items=0 ppid=1 pid=3651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm=systemd-localed exe=/usr/lib/systemd/systemd-localed subj=system_u:system_r:systemd_localed_t:s0 key=(null)

Hash: systemd-localed,systemd_localed_t,etc_t,file,create

audit2allow

#============= systemd_localed_t ==============
allow systemd_localed_t etc_t:file { write create };

audit2allow -R

#============= systemd_localed_t ==============
allow systemd_localed_t etc_t:file { write create };


Additional info:
hashmarkername: setroubleshoot
kernel:         3.8.1-201.fc18.x86_64
type:           libreport

Comment 1 Daniel Walsh 2013-03-08 21:26:30 UTC

*** This bug has been marked as a duplicate of bug 919555 ***


Note You need to log in before you can comment on or make changes to this bug.