FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora SELinux Support

 
 
LinkBack Thread Tools
 
Old 12-28-2007, 06:27 PM
"Tom London"
 
Default logrotate_t wants { rename write } to NetworkManager_log_t

Running selinux-policy-3.2.5-5.fc9, targeted/enforcing.

Been seeing these lately:

type=AVC msg=audit(1198863940.082:38): avc: denied { rename } for
pid=7287 comm="logrotate" name="wpa_supplicant.log" dev=dm-0 ino=66102
scontext=system_u:system_r:logrotate_t:s0
tcontext=system_ubject_r:NetworkManager_log_t:s0 tclass=file
type=SYSCALL msg=audit(1198863940.082:38): arch=40000003 syscall=38
success=no exit=-13 a0=96d01d8 a1=96cdcd0 a2=96d0dc0 a3=96cdcb8
items=0 ppid=7285 pid=7287 auid=4294967295 uid=0 gid=0 euid=0 suid=0
fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="logrotate"
exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0
key=(null)
type=AVC msg=audit(1198863940.082:39): avc: denied { write } for
pid=7287 comm="logrotate" name="wpa_supplicant.log" dev=dm-0 ino=66102
scontext=system_u:system_r:logrotate_t:s0
tcontext=system_ubject_r:NetworkManager_log_t:s0 tclass=file
type=SYSCALL msg=audit(1198863940.082:39): arch=40000003 syscall=5
success=no exit=-13 a0=96d01d8 a1=8042 a2=180 a3=8042 items=0
ppid=7285 pid=7287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0
egid=0 sgid=0 fsgid=0 tty=(none) comm="logrotate"
exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0
key=(null)

tom
--
Tom London

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
 
Old 12-31-2007, 07:41 PM
Daniel J Walsh
 
Default logrotate_t wants { rename write } to NetworkManager_log_t

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tom London wrote:
> Running selinux-policy-3.2.5-5.fc9, targeted/enforcing.
>
> Been seeing these lately:
>
> type=AVC msg=audit(1198863940.082:38): avc: denied { rename } for
> pid=7287 comm="logrotate" name="wpa_supplicant.log" dev=dm-0 ino=66102
> scontext=system_u:system_r:logrotate_t:s0
> tcontext=system_ubject_r:NetworkManager_log_t:s0 tclass=file
> type=SYSCALL msg=audit(1198863940.082:38): arch=40000003 syscall=38
> success=no exit=-13 a0=96d01d8 a1=96cdcd0 a2=96d0dc0 a3=96cdcb8
> items=0 ppid=7285 pid=7287 auid=4294967295 uid=0 gid=0 euid=0 suid=0
> fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="logrotate"
> exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0
> key=(null)
> type=AVC msg=audit(1198863940.082:39): avc: denied { write } for
> pid=7287 comm="logrotate" name="wpa_supplicant.log" dev=dm-0 ino=66102
> scontext=system_u:system_r:logrotate_t:s0
> tcontext=system_ubject_r:NetworkManager_log_t:s0 tclass=file
> type=SYSCALL msg=audit(1198863940.082:39): arch=40000003 syscall=5
> success=no exit=-13 a0=96d01d8 a1=8042 a2=180 a3=8042 items=0
> ppid=7285 pid=7287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0
> egid=0 sgid=0 fsgid=0 tty=(none) comm="logrotate"
> exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0
> key=(null)
>
> tom
Fixed in
selinux-policy-3.2.5-6
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkd5U+IACgkQrlYvE4MpobPJogCeP+/04zTry2CIAa294MJsYBJ6
cNYAn252kn87rfK9L/9a8g1Fa0ERaMo/
=+01H
-----END PGP SIGNATURE-----

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
 

Thread Tools




All times are GMT. The time now is 03:37 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org