Re: F8 avc: denied during NFS mount

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Lamont Peterson wrote:
>  All,
>  
>  I got this while mounting via "ls /net/server/":
>  
>  Summary
>      SELinux is preventing rpc.statd (rpcd_t) "write" to pipe (automount_t).
>  
>  Detailed Description
>      SELinux denied access requested by rpc.statd. It is not expected that this
>      access is required by rpc.statd and this access may signal an intrusion
>      attempt. It is also possible that the specific version or configuration of
>      the application is causing it to require additional access.
>  
>  Allowing Access
>      You can generate a local policy module to allow this access - see
>      http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can 
>  disable
>      SELinux protection altogether. Disabling SELinux protection is not
>      recommended. Please file a 
>  http://bugzilla.redhat.com/bugzilla/enter_bug.cgi
>      against this package.
>  
>  Additional Information        
>  
>  Source Context                system_u:system_r:rpcd_t:s0
>  Target Context                system_u:system_r:automount_t:s0
>  Target Objects                pipe [ fifo_file ]
>  Affected RPM Packages         
>  Policy RPM                    selinux-policy-3.0.8-74.fc8
>  Selinux Enabled               True
>  Policy Type                   targeted
>  MLS Enabled                   True
>  Enforcing Mode                Enforcing
>  Plugin Name                   plugins.catchall
>  Host Name                     reaver.lamontpeterson.net
>  Platform                      Linux reaver.lamontpeterson.net 2.6.23.9-85.fc8 
>  #1
>                                SMP Fri Dec 7 15:49:36 EST 2007 x86_64 x86_64
>  Alert Count                   1
>  First Seen                    Fri 18 Jan 2008 05:35:16 PM MST
>  Last Seen                     Fri 18 Jan 2008 05:35:16 PM MST
>  Local ID                      1b3c736c-2edb-4c23-8440-c423dca231f0
>  Line Numbers                  
>  
>  Raw Audit Messages            
>  
>  avc: denied { write } for comm=rpc.statd dev=pipefs path=pipe:[605687] 
>  pid=8732
>  scontext=system_u:system_r:rpcd_t:s0 tclass=fifo_file
>  tcontext=system_u:system_r:automount_t:s0
>  
>  
>  ------------------------------------------------------------------------
>  
>  --
>  fedora-selinux-list mailing list
>  fedora-selinux-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-selinux-list 
This can be safely
ignored and will be don't audited in the next release
of policy.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.8 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkej47gACgkQrlYvE4MpobMHxwCgu4+hISYsqyJ6RDdkxXahpgVo
> bLEAnApL/HhQurypUIGCZPpvpdmi9gBf
> =F/Mu
> -----END PGP SIGNATURE-----