LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
LinkBack Search this Thread
Old 09-11-2006, 08:36 AM   #1
dansawyer
Member
 
Registered: Mar 2005
Posts: 122

Rep: Reputation: 15
selinux policy or attribute ??


All,

The system is FC5. Several packages, logroate, makewhatis, yum, updatedb, etc. appear to have problems with policy. Below is an example. What is the issue? Thanks - Dan

ls -Z /usr/sbin/logrotate
-rwxr-xr-x root root system_ubject_r:logrotate_exec_t /usr/sbin/logrotate

ls -Z /var/lib/logrotate.status
-rw-r--r-- root root system_ubject_r:file_t /var/lib/logrotate.status

audit(1157972563.535:1748): avc: denied { write } for pid=8676 comm="logrotate" name="logrotate.status" dev=sda2 ino=803406 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:file_t:s0 tclass=file
 
Old 09-11-2006, 03:09 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,524
Blog Entries: 51

Rep: Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601
Run through audit2allow?
 
Old 09-11-2006, 09:30 PM   #3
dansawyer
Member
 
Registered: Mar 2005
Posts: 122

Original Poster
Rep: Reputation: 15
Great - thanks.

All the errors related to hotplug. Why or how would hotplug/udev not be in the policy set?

Thanks - Dan
 
Old 09-12-2006, 02:08 AM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,524
Blog Entries: 51

Rep: Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601
All the errors related to hotplug. Why or how would hotplug/udev not be in the policy set?
I think hotplug/udev would be, but the policy may not expect those packages to run in that context.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
GENTOO - problem running 'make load' for selinux policy Snerkel Linux - Distributions 3 09-21-2006 11:30 PM
SELinux policy and Cisco vpn client NetArch Linux - Security 1 10-28-2005 03:21 AM
selinux:policy.conf silvercloud Linux - Enterprise 0 08-23-2005 04:38 AM
FYI: FC3, Punkbuster, selinux-policy-targeted Jimbo99 Linux - Software 15 06-18-2005 09:32 PM
problem when emerging selinux-base-policy-20040906 Snerkel Linux - Distributions 0 10-24-2004 07:58 PM


All times are GMT -5. The time now is 08:32 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration