Description of problem:<br />
SELinux is preventing /usr/libexec/colord from 'search' accesses on the directory 4907.<br />
<br />
***** Plugin catchall (100. confidence) suggests **************************<br />
<br />
If si crede che colord dovrebbe avere possibilita? di accesso search sui 4907 directory in modo predefinito.<br />
Then si dovrebbe riportare il problema come bug.<br />
E' possibile generare un modulo di politica locale per consentire questo accesso.<br />
Do<br />
consentire questo accesso per il momento eseguendo:<br />
# grep colord /var/log/audit/audit.log | audit2allow -M mypol<br />
# semodule -i mypol.pp<br />
<br />
Additional Information:<br />
Source Context system_u:system_r:colord_t:s0<br />
Target Context system_u:system_r:unconfined_service_t:s0<br />
Target Objects 4907 [ dir ]<br />
Source colord<br />
Source Path /usr/libexec/colord<br />
Port <Unknown><br />
Host (removed)<br />
Source RPM Packages colord-1.0.4-3.el7.x86_64<br />
Target RPM Packages <br />
Policy RPM selinux-policy-3.13.1-23.el7_1.7.noarch<br />
Selinux Enabled True<br />
Policy Type targeted<br />
Enforcing Mode Enforcing<br />
Host Name (removed)<br />
Platform Linux (removed) 3.10.0-229.4.2.el7.x86_64 #1 SMP<br />
Wed May 13 10:06:09 UTC 2015 x86_64 x86_64<br />
Alert Count 2<br />
First Seen 2015-05-21 12:40:27 CEST<br />
Last Seen 2015-05-21 12:40:27 CEST<br />
Local ID 5a0c0f42-9d54-4b3c-b0ac-fa13ade20970<br />
<br />
Raw Audit Messages<br />
type=AVC msg=audit(1432204827.889:434): avc: denied { search } for pid=2663 comm="colord" name="4907" dev="proc" ino=40012 scontext=system_u:system_r:colord_t:s0 tcontext=system_u:system_r:unconfined_service_t:s0 tclass=dir<br />
<br />
<br />
type=SYSCALL msg=audit(1432204827.889:434): arch=x86_64 syscall=open success=no exit=EACCES a0=7f8c17218a00 a1=0 a2=7fff799724c0 a3=0 items=0 ppid=1 pid=2663 auid=4294967295 uid=998 gid=998 euid=998 suid=998 fsuid=998 egid=998 sgid=998 fsgid=998 tty=(none) ses=4294967295 comm=colord exe=/usr/libexec/colord subj=system_u:system_r:colord_t:s0 key=(null)<br />
<br />
Hash: colord,colord_t,unconfined_service_t,dir,search
↧