Dear all, As of updates to machine rawhide report 20080126, I get the following warning from setroubleshoot: Is it related to the previous one, dbus-daemon, or is it a new one? Thanks, Antonio Summary: SELinux is preventing dbus-daemon-lau(/lib/dbus-1/dbus-daemon-launch-helper) (system_dbusd_t) "execute" to <Unknown> (consolekit_exec_t). Detailed Description: SELinux denied access requested by dbus-daemon-lau(/lib/dbus-1/dbus-daemon-launch-helper). It is not expected that this access is required by dbus-daemon-lau(/lib/dbus-1/dbus-daemon-launch-helper) and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access: Sometimes labeling problems can cause SELinux denials. You could try to restore the default system file context for <Unknown>, restorecon -v <Unknown> If this does not work, there is currently no automatic way to allow this access. Instead, you can generate a local policy module to allow this access - see FAQ (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable SELinux protection altogether. Disabling SELinux protection is not recommended. Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this package. Additional Information: Source Context system_u:system_r:system_dbusd_t Target Context system_u:object_r:consolekit_exec_t Target Objects None [ file ] Source dbus-daemon-lau(/lib/dbus-1/dbus-daemon-launch- helper) Port <Unknown> Host localhost Source RPM Packages Target RPM Packages Policy RPM selinux-policy-3.2.5-19.fc9 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name catchall_file Host Name localhost Platform Linux localhost 2.6.24-2.fc9 #1 SMP Fri Jan 25 13:14:54 EST 2008 i686 athlon Alert Count 17 First Seen Sat 26 Jan 2008 02:17:08 PM CST Last Seen Sat 26 Jan 2008 02:18:52 PM CST Local ID 49f54895-d96b-44a0-8144-e7c4e8b3965f Line Numbers Raw Audit Messages host=localhost type=AVC msg=audit(1201378732.288:37): avc: denied { execute } for pid=2640 comm="dbus-daemon-lau" name="console-kit-daemon" dev=dm-0 ino=32542536 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:consolekit_exec_t:s0 tclass=file host=localhost type=SYSCALL msg=audit(1201378732.288:37): arch=40000003 syscall=11 success=no exit=-13 a0=9750020 a1=974fc80 a2=974f008 a3=60099c items=0 ppid=2639 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dbus-daemon-lau" exe="/lib/dbus-1/dbus-daemon-launch-helper" subj=system_u:system_r:system_dbusd_t:s0 key=(null) ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
