LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Fedora
User Name
Password
Fedora This forum is for the discussion of the Fedora Project.

Notices



Reply
 
Search this Thread
Old 02-07-2013, 07:36 AM   #1
CollieJim
Member
 
Registered: Mar 2005
Distribution: Gentoo, Kubuntu
Posts: 448

Rep: Reputation: 19
SELinux & colord-sane warning


Every time I boot Fedora 17 I get an SELinux warning:
Code:
 SELinux has detected a problem.
The source process: /usr/libexec/colord-sane
Attempted this access:  name_connect
On this tcp_socket: <blank>
Is it a valid warning?
It looks like colord-sane is trying to access the LAN. Why?
How do I get rid of it?
I want other warnings, but not this one. I click "Ignore" but it keeps coming back.

Thanks
Jim
 
Old 02-07-2013, 09:08 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,720
Blog Entries: 54

Rep: Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968
Run this to see what package this item belongs to and what it does:
Code:
rpm -qi colord
Run this to check for resources:
Code:
apropos color
Check the manual page:
Code:
man colormgr
and see the documentation (if any):
Code:
less /usr/share/doc/colord/README
Post contents of "/tmp/colord-sane.log" from running this:
Code:
grep colord-sane /var/log/audit/audit.log|audit2allow 2>&1 | tee /tmp/colord-sane.log
 
Old 02-08-2013, 01:49 AM   #3
CollieJim
Member
 
Registered: Mar 2005
Distribution: Gentoo, Kubuntu
Posts: 448

Original Poster
Rep: Reputation: 19
Thanks. From the log it looks like the SELinux message is a bug?

Code:
 # grep colord-sane /var/log/audit/audit.log|audit2allow 2>&1 | tee /tmp/colord-sane.log


#============= colord_t ==============
#!!!! This avc can be allowed using the boolean 'allow_ypbind'

allow colord_t unreserved_port_t:tcp_socket name_connect;
 
Old 02-08-2013, 05:40 AM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,720
Blog Entries: 54

Rep: Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968
No, not a bug. See 'man setsebool' for what 'setsebool -P allow_ypbind=on' would do.
 
Old 02-08-2013, 06:27 AM   #5
CollieJim
Member
 
Registered: Mar 2005
Distribution: Gentoo, Kubuntu
Posts: 448

Original Poster
Rep: Reputation: 19
It looks like my reading comprehension needs an upgrade!

I can stop the message now, but I will look into why colord-sane needs to use a tcp socket.

Thanks for the help.
 
Old 02-08-2013, 07:08 AM   #6
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,720
Blog Entries: 54

Rep: Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968Reputation: 2968
Since your reading comprehension seems OK to me I'll leave you with two tickets, related, entertaining and informative:
https://bugzilla.redhat.com/show_bug.cgi?id=875424
https://bugzilla.redhat.com/show_bug.cgi?id=756334
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] What is 'colord-sane'? CollieJim Linux - Software 5 01-20-2013 04:44 AM
sane: conflicting advice man sane-usb/howto sonichedgehog Linux - Newbie 6 12-02-2007 06:48 PM
Japanese canna won't work : Warning: &#12363;&#12394;&#28450;&#23383;&#22793;&am OrganicOrange84 Debian 3 06-30-2005 03:28 PM
SElinux & php4 & interbase & apache maxut Linux - Security 0 03-15-2005 05:57 AM
HP ScanJet 2200&2300c not detected by SANE or Drakconf hraposo Mandriva 6 09-21-2004 12:50 PM


All times are GMT -5. The time now is 04:48 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration