LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Fedora
User Name
Password
Fedora This forum is for the discussion of the Fedora Project.

Notices

Reply
 
Search this Thread
Old 02-07-2013, 06:36 AM   #1
CollieJim
Member
 
Registered: Mar 2005
Distribution: Gentoo, Kubuntu
Posts: 434

Rep: Reputation: 19
SELinux & colord-sane warning


Every time I boot Fedora 17 I get an SELinux warning:
Code:
 SELinux has detected a problem.
The source process: /usr/libexec/colord-sane
Attempted this access:  name_connect
On this tcp_socket: <blank>
Is it a valid warning?
It looks like colord-sane is trying to access the LAN. Why?
How do I get rid of it?
I want other warnings, but not this one. I click "Ignore" but it keeps coming back.

Thanks
Jim
 
Old 02-07-2013, 08:08 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,369
Blog Entries: 54

Rep: Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869
Run this to see what package this item belongs to and what it does:
Code:
rpm -qi colord
Run this to check for resources:
Code:
apropos color
Check the manual page:
Code:
man colormgr
and see the documentation (if any):
Code:
less /usr/share/doc/colord/README
Post contents of "/tmp/colord-sane.log" from running this:
Code:
grep colord-sane /var/log/audit/audit.log|audit2allow 2>&1 | tee /tmp/colord-sane.log
 
Old 02-08-2013, 12:49 AM   #3
CollieJim
Member
 
Registered: Mar 2005
Distribution: Gentoo, Kubuntu
Posts: 434

Original Poster
Rep: Reputation: 19
Thanks. From the log it looks like the SELinux message is a bug?

Code:
 # grep colord-sane /var/log/audit/audit.log|audit2allow 2>&1 | tee /tmp/colord-sane.log


#============= colord_t ==============
#!!!! This avc can be allowed using the boolean 'allow_ypbind'

allow colord_t unreserved_port_t:tcp_socket name_connect;
 
Old 02-08-2013, 04:40 AM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,369
Blog Entries: 54

Rep: Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869
No, not a bug. See 'man setsebool' for what 'setsebool -P allow_ypbind=on' would do.
 
Old 02-08-2013, 05:27 AM   #5
CollieJim
Member
 
Registered: Mar 2005
Distribution: Gentoo, Kubuntu
Posts: 434

Original Poster
Rep: Reputation: 19
It looks like my reading comprehension needs an upgrade!

I can stop the message now, but I will look into why colord-sane needs to use a tcp socket.

Thanks for the help.
 
Old 02-08-2013, 06:08 AM   #6
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,369
Blog Entries: 54

Rep: Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869Reputation: 2869
Since your reading comprehension seems OK to me I'll leave you with two tickets, related, entertaining and informative:
https://bugzilla.redhat.com/show_bug.cgi?id=875424
https://bugzilla.redhat.com/show_bug.cgi?id=756334
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] What is 'colord-sane'? CollieJim Linux - Software 5 01-20-2013 03:44 AM
sane: conflicting advice man sane-usb/howto sonichedgehog Linux - Newbie 6 12-02-2007 05:48 PM
Japanese canna won't work : Warning: &#12363;&#12394;&#28450;&#23383;&#22793;&am OrganicOrange84 Debian 3 06-30-2005 02:28 PM
SElinux & php4 & interbase & apache maxut Linux - Security 0 03-15-2005 04:57 AM
HP ScanJet 2200&2300c not detected by SANE or Drakconf hraposo Mandriva 6 09-21-2004 11:50 AM


All times are GMT -5. The time now is 05:21 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration