selinux June 2006

selinux@lists.fedoraproject.org

45 participants
61 discussions

automount policy still broken
by Tom London 08 Jun '06

08 Jun '06

Running latest rawhide, targeted/enforcing. Automount still fails: type=AVC msg=audit(1149695027.054:8): avc: denied { search } for pid=2322 comm="automount" name="irq" dev=proc ino=-268435218 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:object_r:sysctl_irq_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.054:8): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.054:8): cwd="/" type=PATH msg=audit(1149695027.054:8): item=0 name="/proc/irq/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.054:9): avc: denied { search } for pid=2322 comm="automount" name="net" dev=proc ino=-268435432 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.054:9): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.054:9): cwd="/" type=PATH msg=audit(1149695027.054:9): item=0 name="/proc/net/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.058:10): avc: denied { search } for pid=2322 comm="automount" name="1" dev=proc ino=65538 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.058:10): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.058:10): cwd="/" type=PATH msg=audit(1149695027.058:10): item=0 name="/proc/1/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.058:11): avc: denied { search } for pid=2322 comm="automount" name="2" dev=proc ino=131074 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.058:11): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.058:11): cwd="/" type=PATH msg=audit(1149695027.058:11): item=0 name="/proc/2/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.058:12): avc: denied { search } for pid=2322 comm="automount" name="3" dev=proc ino=196610 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.058:12): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.058:12): cwd="/" type=PATH msg=audit(1149695027.058:12): item=0 name="/proc/3/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.058:13): avc: denied { search } for pid=2322 comm="automount" name="4" dev=proc ino=262146 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.058:13): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.058:13): cwd="/" type=PATH msg=audit(1149695027.058:13): item=0 name="/proc/4/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.058:14): avc: denied { search } for pid=2322 comm="automount" name="5" dev=proc ino=327682 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.058:14): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.058:14): cwd="/" type=PATH msg=audit(1149695027.058:14): item=0 name="/proc/5/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.058:15): avc: denied { search } for pid=2322 comm="automount" name="6" dev=proc ino=393218 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.058:15): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.058:15): cwd="/" type=PATH msg=audit(1149695027.058:15): item=0 name="/proc/6/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.058:16): avc: denied { search } for pid=2322 comm="automount" name="7" dev=proc ino=458754 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.058:16): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.058:16): cwd="/" type=PATH msg=audit(1149695027.058:16): item=0 name="/proc/7/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.062:17): avc: denied { search } for pid=2322 comm="automount" name="9" dev=proc ino=589826 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.062:17): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.062:17): cwd="/" type=PATH msg=audit(1149695027.062:17): item=0 name="/proc/9/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.062:18): avc: denied { search } for pid=2322 comm="automount" name="10" dev=proc ino=655362 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.062:18): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.062:18): cwd="/" type=PATH msg=audit(1149695027.062:18): item=0 name="/proc/10/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.062:19): avc: denied { search } for pid=2322 comm="automount" name="119" dev=proc ino=7798786 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.062:19): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.062:19): cwd="/" type=PATH msg=audit(1149695027.062:19): item=0 name="/proc/119/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.062:20): avc: denied { search } for pid=2322 comm="automount" name="121" dev=proc ino=7929858 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.062:20): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.062:20): cwd="/" type=PATH msg=audit(1149695027.062:20): item=0 name="/proc/121/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.062:21): avc: denied { search } for pid=2322 comm="automount" name="175" dev=proc ino=11468802 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.062:21): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.062:21): cwd="/" type=PATH msg=audit(1149695027.062:21): item=0 name="/proc/175/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.062:22): avc: denied { search } for pid=2322 comm="automount" name="176" dev=proc ino=11534338 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.062:22): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.062:22): cwd="/" type=PATH msg=audit(1149695027.062:22): item=0 name="/proc/176/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.062:23): avc: denied { search } for pid=2322 comm="automount" name="177" dev=proc ino=11599874 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.062:23): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.062:23): cwd="/" type=PATH msg=audit(1149695027.062:23): item=0 name="/proc/177/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.062:24): avc: denied { search } for pid=2322 comm="automount" name="178" dev=proc ino=11665410 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.062:24): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.062:24): cwd="/" type=PATH msg=audit(1149695027.062:24): item=0 name="/proc/178/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.062:25): avc: denied { search } for pid=2322 comm="automount" name="325" dev=proc ino=21299202 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.062:25): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.062:25): cwd="/" type=PATH msg=audit(1149695027.062:25): item=0 name="/proc/325/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.062:26): avc: denied { search } for pid=2322 comm="automount" name="336" dev=proc ino=22020098 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.062:26): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.062:26): cwd="/" type=PATH msg=audit(1149695027.062:26): item=0 name="/proc/336/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.062:27): avc: denied { search } for pid=2322 comm="automount" name="357" dev=proc ino=23396354 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.062:27): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.062:27): cwd="/" type=PATH msg=audit(1149695027.062:27): item=0 name="/proc/357/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.062:28): avc: denied { search } for pid=2322 comm="automount" name="362" dev=proc ino=23724034 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.062:28): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.062:28): cwd="/" type=PATH msg=audit(1149695027.062:28): item=0 name="/proc/362/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.066:29): avc: denied { search } for pid=2322 comm="automount" name="393" dev=proc ino=25755650 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.066:29): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.066:29): cwd="/" type=PATH msg=audit(1149695027.066:29): item=0 name="/proc/393/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.066:30): avc: denied { search } for pid=2322 comm="automount" name="403" dev=proc ino=26411010 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.066:30): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.066:30): cwd="/" type=PATH msg=audit(1149695027.066:30): item=0 name="/proc/403/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.066:31): avc: denied { search } for pid=2322 comm="automount" name="474" dev=proc ino=31064066 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:udev_t:s0-s0:c0.c255 tclass=dir type=SYSCALL msg=audit(1149695027.066:31): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.066:31): cwd="/" type=PATH msg=audit(1149695027.066:31): item=0 name="/proc/474/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.066:32): avc: denied { search } for pid=2322 comm="automount" name="810" dev=proc ino=53084162 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.066:32): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.066:32): cwd="/" type=PATH msg=audit(1149695027.066:32): item=0 name="/proc/810/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.066:33): avc: denied { search } for pid=2322 comm="automount" name="1588" dev=proc ino=104071170 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.066:33): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.066:33): cwd="/" type=PATH msg=audit(1149695027.066:33): item=0 name="/proc/1588/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.066:34): avc: denied { search } for pid=2322 comm="automount" name="1651" dev=proc ino=108199938 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.066:34): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.066:34): cwd="/" type=PATH msg=audit(1149695027.066:34): item=0 name="/proc/1651/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.066:35): avc: denied { search } for pid=2322 comm="automount" name="1705" dev=proc ino=111738882 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:cpuspeed_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.066:35): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.066:35): cwd="/" type=PATH msg=audit(1149695027.066:35): item=0 name="/proc/1705/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.066:36): avc: denied { search } for pid=2322 comm="automount" name="1989" dev=proc ino=130351106 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:dhcpc_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.066:36): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.066:36): cwd="/" type=PATH msg=audit(1149695027.066:36): item=0 name="/proc/1989/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.066:37): avc: denied { search } for pid=2322 comm="automount" name="2036" dev=proc ino=133431298 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.066:37): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.066:37): cwd="/" type=PATH msg=audit(1149695027.066:37): item=0 name="/proc/2036/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.066:38): avc: denied { search } for pid=2322 comm="automount" name="2038" dev=proc ino=133562370 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.066:38): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.066:38): cwd="/" type=PATH msg=audit(1149695027.066:38): item=0 name="/proc/2038/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.066:39): avc: denied { search } for pid=2322 comm="automount" name="2052" dev=proc ino=134479874 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:setrans_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.066:39): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.066:39): cwd="/" type=PATH msg=audit(1149695027.066:39): item=0 name="/proc/2052/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.070:40): avc: denied { search } for pid=2322 comm="automount" name="2061" dev=proc ino=135069698 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.070:40): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.070:40): cwd="/" type=PATH msg=audit(1149695027.070:40): item=0 name="/proc/2061/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.070:41): avc: denied { search } for pid=2322 comm="automount" name="2064" dev=proc ino=135266306 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:klogd_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.070:41): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.070:41): cwd="/" type=PATH msg=audit(1149695027.070:41): item=0 name="/proc/2064/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.070:42): avc: denied { search } for pid=2322 comm="automount" name="2088" dev=proc ino=136839170 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:portmap_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.070:42): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.070:42): cwd="/" type=PATH msg=audit(1149695027.070:42): item=0 name="/proc/2088/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.070:43): avc: denied { search } for pid=2322 comm="automount" name="2107" dev=proc ino=138084354 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:rpcd_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.070:43): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.070:43): cwd="/" type=PATH msg=audit(1149695027.070:43): item=0 name="/proc/2107/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.070:44): avc: denied { search } for pid=2322 comm="automount" name="2136" dev=proc ino=139984898 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:rpcd_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.070:44): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.070:44): cwd="/" type=PATH msg=audit(1149695027.070:44): item=0 name="/proc/2136/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.074:45): avc: denied { search } for pid=2322 comm="automount" name="2177" dev=proc ino=142671874 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.074:45): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.074:45): cwd="/" type=PATH msg=audit(1149695027.074:45): item=0 name="/proc/2177/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.074:46): avc: denied { search } for pid=2322 comm="automount" name="2187" dev=proc ino=143327234 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.074:46): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.074:46): cwd="/" type=PATH msg=audit(1149695027.074:46): item=0 name="/proc/2187/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.074:47): avc: denied { search } for pid=2322 comm="automount" name="2217" dev=proc ino=145293314 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.074:47): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.074:47): cwd="/" type=PATH msg=audit(1149695027.074:47): item=0 name="/proc/2217/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.074:48): avc: denied { search } for pid=2322 comm="automount" name="2235" dev=proc ino=146472962 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.074:48): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.074:48): cwd="/" type=PATH msg=audit(1149695027.074:48): item=0 name="/proc/2235/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.074:49): avc: denied { search } for pid=2322 comm="automount" name="2254" dev=proc ino=147718146 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.074:49): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.074:49): cwd="/" type=PATH msg=audit(1149695027.074:49): item=0 name="/proc/2254/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.074:50): avc: denied { search } for pid=2322 comm="automount" name="2267" dev=proc ino=148570114 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.074:50): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.074:50): cwd="/" type=PATH msg=audit(1149695027.074:50): item=0 name="/proc/2267/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.074:51): avc: denied { search } for pid=2322 comm="automount" name="2268" dev=proc ino=148635650 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.074:51): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.074:51): cwd="/" type=PATH msg=audit(1149695027.074:51): item=0 name="/proc/2268/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.074:52): avc: denied { search } for pid=2322 comm="automount" name="2271" dev=proc ino=148832258 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.074:52): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.074:52): cwd="/" type=PATH msg=audit(1149695027.074:52): item=0 name="/proc/2271/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.074:53): avc: denied { search } for pid=2322 comm="automount" name="2310" dev=proc ino=151388162 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:bluetooth_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.074:53): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.074:53): cwd="/" type=PATH msg=audit(1149695027.074:53): item=0 name="/proc/2310/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.074:54): avc: denied { search } for pid=2322 comm="automount" name="2318" dev=proc ino=151912450 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=dir type=SYSCALL msg=audit(1149695027.074:54): arch=40000003 syscall=5 success=no exit=-13 a0=bfec7988 a1=0 a2=1b6 a3=9e7b290 items=1 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.074:54): cwd="/" type=PATH msg=audit(1149695027.074:54): item=0 name="/proc/2318/cmdline" obj=system_u:object_r:proc_t:s0 type=AVC msg=audit(1149695027.074:55): avc: denied { setrlimit } for pid=2322 comm="automount" scontext=system_u:system_r:automount_t:s0 tcontext=system_u:system_r:automount_t:s0 tclass=process type=SYSCALL msg=audit(1149695027.074:55): arch=40000003 syscall=75 success=no exit=-13 a0=7 a1=bfec9414 a2=b38ff4 a3=bfec9414 items=0 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=AVC msg=audit(1149695027.078:56): avc: denied { execute } for pid=2327 comm="automount" name="modprobe" dev=dm-0 ino=2687054 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:object_r:insmod_exec_t:s0 tclass=file type=SYSCALL msg=audit(1149695027.078:56): arch=40000003 syscall=11 success=no exit=-13 a0=2edebf a1=bfec58b0 a2=9e791e8 a3=2edebf items=1 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="automount" exe="/usr/sbin/automount" subj=system_u:system_r:automount_t:s0 type=CWD msg=audit(1149695027.078:56): cwd="/" type=PATH msg=audit(1149695027.078:56): item=0 name="/sbin/modprobe" inode=2687054 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:insmod_exec_t:s0 -- Tom London

2 1

postgresql AVC errors
by Ben 08 Jun '06

08 Jun '06

I get this a LOT on my fedora postgres server: kernel: audit(1148742297.318:91630): avc: denied { create } for pid=29176 comm="postmaster" scontext=system_u:system_r:postgresql_t:s0 tcontext=system_u:system_r:postgresql_t:s0 tclass=netlink_route_socket It doesn't seem to harm anything, but it hardly seems like it should be there, either. Ideas?

3 2

selinux-policy 2.2.43-4 file_contexts conflict
by Valdis.Kletnieks＠vt.edu 08 Jun '06

08 Jun '06

In today's rawhide: /etc/selinux/strict/contexts/files/file_contexts: Multiple different specifications for /usr/bin/mplayer (system_u:object_r:unconfined_execmem_exec_t and system_u:object_r:mplayer_exec_t). Looks like somebody added an mplayer policy and the cleanup didn't get finished?

1 0

Another mount issue
by Paul Howarth 08 Jun '06

08 Jun '06

On my file/web/samba/nfs server I have a software archive, which I serve out using both samba and httpd. So the whole thing as public_content_rw_t, and the appropriate boolean set so that samba can write to it. On the software archive I have DVD ISO images of FC4 and FC5. I have fstab entries for these to loopback mount them as follows: /srv/softlib/fedora/stentz/FC4-i386-DVD.iso /srv/softlib/fedora/stentz/dvd iso9660 ro,loop,fscontext=system_u:object_r:public_content_t 0 0 /srv/softlib/fedora/bordeaux/FC-5-i386-DVD.iso /srv/softlib/fedora/bordeaux/dvd iso9660 ro,loop,fscontext=system_u:object_r:public_content_t 0 0 Unfortunately the mount won't work at boot time because mount is confined to the mount_t domain, which can't read public_content_rw_t: Apr 21 08:40:21 badby kernel: audit(1145605218.512:331): avc: denied { read } for pid=1469 comm="mount" name="FC4-i386-DVD.iso" dev=dm-5 ino=1032205 scontext=system_u:system_r:mount_t:s0 tcontext=system_u:object_r:public_content_rw_t:s0 tclass=file Apr 21 08:40:21 badby kernel: audit(1145605218.564:332): avc: denied { read } for pid=1469 comm="mount" name="FC-5-i386-DVD.iso" dev=dm-5 ino=606259 scontext=system_u:system_r:mount_t:s0 tcontext=root:object_r:public_content_rw_t:s0 tclass=file A "mount -a" after booting works fine as it then runs unconfined. Is this something that should be generally allowed or should I just write local policy to fix this? Paul.

3 3

noexec mount-option with selinux?
by Marten Lehmann 07 Jun '06

07 Jun '06

Hello, I would like to mount the /tmp directory with the noexec option, so that no files can be executed directly from /tmp. But the problem is, that I don't have a separate partition for /tmp. It would be useless to create one, because the users on this system have strict quota limits, which wouldn't apply on a separate /tmp partition. Lots of example policies only show ways to restrict certain applications. But is there a way to restrict access to the /tmp directory in general, too? Regards Marten

8 16

Problems with pppd and mgetty+sendfax on FC5
by Peter Hancox 07 Jun '06

07 Jun '06

Recently installed FC5 and am experiencing problems with pppd and mgetty+sendfax when running with SELinux enabled. mgetty+sendfax was unable to write to /var/spool/fax/incoming. However, switching to permissive mode fixed this problem. What I can't understand is the problem experienced with pppd. Users dialing in fail PAP authentication when SELinux is enabled. This doesn't happen with SELinux disabled and dial in works correctly. However, when SELinux is enabled but running in "permissive" mode rather than "enforcing", pppd still fails. I thought that in "permissive" mode, SELinux would just log the permission failures but allow everything to go ahead ??? Appears that SELinux is still preventing pppd from accessing the shadow file to validate user password credentials. Is this a special case? Disabling SELinux protection for pppd didn't appear to make any difference. Jun 7 11:44:59 zeus mgetty[2458]: data dev=ttyS1, pid=2458, caller='none', conn='26400/ARQ/V34/LAPM/V42BIS', name='', cmd='/usr/sbin/pppd', user='/AutoPPP/' Jun 7 11:44:59 zeus pppd[2458]: pppd 2.4.3 started by a_ppp, uid 0 Jun 7 11:44:59 zeus pppd[2458]: Using interface ppp0 Jun 7 11:44:59 zeus pppd[2458]: Connect: ppp0 <--> /dev/ttyS1 Jun 7 11:45:02 zeus pppd[2458]: PAP peer authentication failed for phancox Jun 7 11:45:02 zeus kernel: audit(1149644702.926:69): avc: denied { read } for pid=2458 comm="pppd" name="shadow" dev=dm-0 ino=1495903 scontext=system_u:system_r:pppd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file Jun 7 11:45:02 zeus kernel: audit(1149644702.926:70): avc: denied { getattr } for pid=2458 comm="pppd" name="shadow" dev=dm-0 ino=1495903 scontext=system_u:system_r:pppd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file Jun 7 11:45:02 zeus kernel: audit(1149644702.930:71): avc: denied { create } for pid=2458 comm="pppd" scontext=system_u:system_r:pppd_t:s0 tcontext=system_u:system_r:pppd_t:s0 tclass=netlink_audit_socket Jun 7 11:45:02 zeus kernel: audit(1149644702.930:72): avc: denied { write } for pid=2458 comm="pppd" scontext=system_u:system_r:pppd_t:s0 tcontext=system_u:system_r:pppd_t:s0 tclass=netlink_audit_socket Jun 7 11:45:02 zeus kernel: audit(1149644702.930:73): avc: denied { nlmsg_relay } for pid=2458 comm="pppd" scontext=system_u:system_r:pppd_t:s0 tcontext=system_u:system_r:pppd_t:s0 tclass=netlink_audit_socket Jun 7 11:45:02 zeus kernel: audit(1149644702.930:74): avc: denied { read } for pid=2458 comm="pppd" scontext=system_u:system_r:pppd_t:s0 tcontext=system_u:system_r:pppd_t:s0 tclass=netlink_audit_socket Jun 7 11:45:03 zeus pppd[2458]: Connection terminated. Jun 7 11:45:03 zeus pppd[2458]: Exit.

1 0

postfix, procmail and SELinux - No Go
by Marc Schwartz 06 Jun '06

06 Jun '06

Hi all, I took advantage of the long weekend here in the States to finally update to FC5. All went well in general, however it has become apparent that procmail is problematic with SELinux enabled. fetchmail and postfix work fine in terms of getting my e-mail from multiple POP3 accounts. However local (~/.procmailrc) procmail filtering does not. My FC4 configuration files, with a few edits to reflect some path changes for postfix, now work fine with SELinux disabled. I was not running SELinux on FC4 and all worked fine there. I found other FC5/SELinux posts where others have had similar problems and disabling SELinux solved them. This is on a fully updated FC5 system as of the writing of this post. Is there a policy update pending to resolve this issue or some temporary steps that can be used in the interim, short of disabling SELinux entirely? Thanks, Marc Schwartz

4 25

Stuff I found in my log?
by Knute Johnson 06 Jun '06

06 Jun '06

I found some interesting things in my 'messages' log today. I'm not sure what they mean and would appreciate any information. This one is the most bothersome. It appears that 'useradd' was prevented from running this morning only I didn't run it. Would any other programs run 'useradd' and what would cause it to be denied? May 23 05:11:49 rabbitbrush kernel: audit(1148386309.877:556): avc: denied { write } for pid=13906 comm="useradd" name="[1708464]" dev=pipefs ino=1708464 scontext=user_u:system_r:useradd_t:s0 tcontext=user_u:system_r:unconfined_t:s0 tclass=fifo_file There are a boatload of these messages. I know that 'webalizer' is a statistics formatter for the web server but why would it be run dozens of times and be denied? May 23 04:02:02 rabbitbrush kernel: audit(1148382121.861:514): avc: denied { create } for pid=12313 comm="webalizer" scontext=user_u:system_r:webalizer_t:s0 tcontext=user_u:system_r:webalizer_t:s0 tclass=netlink_route_socket May 23 04:02:02 rabbitbrush kernel: audit(1148382122.237:515): avc: denied { create } for pid=12313 comm="webalizer" scontext=user_u:system_r:webalizer_t:s0 tcontext=user_u:system_r:webalizer_t:s0 tclass=netlink_route_socket May 23 04:02:02 rabbitbrush kernel: audit(1148382122.237:516): avc: denied { create } for pid=12313 comm="webalizer" scontext=user_u:system_r:webalizer_t:s0 tcontext=user_u:system_r:webalizer_t:s0 tclass=netlink_route_socket What would cause hundreds of these messages to appear in the log. I know I played with setsebool but I only changed one item. May 22 17:33:58 rabbitbrush kernel: audit(1148344436.645:286): avc: granted { setbool } for pid=2303 comm="setsebool" scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=security May 22 17:33:58 rabbitbrush kernel: audit(1148344436.645:287): avc: granted { setbool } for pid=2303 comm="setsebool" scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=security May 22 17:33:58 rabbitbrush kernel: audit(1148344436.645:288): avc: granted { setbool } for pid=2303 comm="setsebool" scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=security May 22 17:33:58 rabbitbrush kernel: audit(1148344436.645:289): avc: granted { setbool } for pid=2303 comm="setsebool" scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=security Thanks very much, -- Knute Johnson Molon Labe...

5 9

policy for mock - put in mock package or selinux-policy-targeted?
by Matt Domsch 04 Jun '06

04 Jun '06

What's the right place to put application-specific policy modules, such as the mock policy outlined here: http://fedoraproject.org/wiki/Extras/MockTricks Should those files get compiled into modules, and installed, using mock's SRPM, or should they go into selinux-policy-targeted? Seth Vidal wants to push out a new mock build soonish, and this is something I'd like cleared up before that if possible. Thanks, Matt -- Matt Domsch Software Architect Dell Linux Solutions linux.dell.com & www.dell.com/linux Linux on Dell mailing lists @ http://lists.us.dell.com

3 3

Cannot FTP to /var/www/don/html with SELinux enabled
by Don 01 Jun '06

01 Jun '06

Hi, I have two problems which I think they are similar. 1) I have a directory /var/www/don/html which is owned by don. I want to ftp some web pages, but I cannot cd to /var/www/don/html when SELinux is enabled. When I turn SELinux off it works. What do I need to set to allow this. 2) If I ftp the html files to my home dir the and copy them to /var/www/don/html they cannot we read by the browser while SELinux is enabled. Thanks in advance, Don

3 4

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

selinux June 2006