avc - f15

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/13/2011 07:44 AM, Genes MailLists wrote:
> On 07/13/2011 07:32 AM, Genes MailLists wrote:
>> 
>> I started getting this today:
>> 
>> (F15 + rawhide(3.0 kernel, procps)
> 
> 
> Forgot to say what I was doing to trigger this:
> 
> 
> This may be related (or may be abrt bug).
> 
> What triggered this is the following (odd because selinux is
> permissive).
> 
> I started chrome - chrome processes are running - but no chrome 
> windows appear - instead I get abrt errors in /var/log/messages (see 
> below) - I did killall chrome to kill off the processes which wont
> start properly.
> 
> Here's what showed in messages - what seems to have happened is - 
> statr chome (it segv's for some reason - which is very odd) - then
> abrt tried to pick up on it - get avc - and then setroubleshootd
> starts.
> 
> After killing the chrome processes - waiting a while - yum erase abrt
> - start chrome it starts fine.
> 
> 
> gene/
> 
> 
> 
> -------------- /var/log/messages -------------------
> 
> 
> Jul 13 07:28:21 lap3 abrt[25068]: Unrecognized variable
> 'DumpLocation' in '/etc/abrt/abrt.conf' Jul 13 07:28:21 lap3 abrtd:
> Unrecognized variable 'DumpLocation' in '/etc/abrt/abrt.conf' Jul 13
> 07:28:21 lap3 dbus: [system] Activating service 
> name='org.fedoraproject.Setroubleshootd' (using servicehelper) Jul 13
> 07:28:21 lap3 dbus: [system] Successfully activated service 
> 'org.fedoraproject.Setroubleshootd' Jul 13 07:28:22 lap3 abrt[25068]:
> saved core dump of pid 25026 (/opt/google/chrome/chrome) to 
> /var/spool/abrt/ccpp-2011-07-13-07:28:21-25026.new/coredump (63602688
> bytes) Jul 13 07:28:22 lap3 abrtd: Unrecognized variable
> 'DumpLocation' in '/etc/abrt/abrt.conf' Jul 13 07:28:22 lap3 abrtd:
> Directory 'ccpp-2011-07-13-07:28:21-25026' creation detected Jul 13
> 07:28:22 lap3 abrtd: Corrupted or bad dump 
> /var/spool/abrt/ccpp-2011-07-13-07:28:21-25026 (res:2), deleting Jul
> 13 07:28:23 lap3 setroubleshoot: SELinux is preventing 
> /usr/libexec/abrt-hook-ccpp from using the sys_ptrace capability.
> For complete SELinux messages. run sealert -l 
> c6a02f63-3cd3-4f33-888b-3f047027dd01 Jul 13 07:28:23 lap3
> setroubleshoot: SELinux is preventing /usr/libexec/abrt-hook-ccpp
> from using the dac_override capability. For complete SELinux
> messages. run sealert -l 6ad9b5e6-ea7d-45ac-900f-7cac78bb5a0a Jul 13
> 07:28:23 lap3 setroubleshoot: SELinux is preventing 
> /usr/libexec/abrt-hook-ccpp from using the dac_override capability.
> For complete SELinux messages. run sealert -l 
> 6ad9b5e6-ea7d-45ac-900f-7cac78bb5a0a Jul 13 07:28:43 lap3 dbus:
> [system] Activating service name='org.fedoraproject.Setroubleshootd'
> (using servicehelper) Jul 13 07:28:43 lap3 dbus: [system]
> Successfully activated service 'org.fedoraproject.Setroubleshootd'
> 
> -- selinux mailing list selinux at lists.fedoraproject.org 
> https://admin.fedoraproject.org/mailman/listinfo/selinux
> 
> 

We had some mistaken file context for abrt apps, which should be fixed
in selinux-policy-3.9.16-33.fc15.src.rpm

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk4dksMACgkQrlYvE4MpobOHwgCfaqWoM8M4Az+p5ugYrVR9U9N4
HvYAniVRGlMTxJlWIaqZIiz47CxRqmQs
=UBl1
-----END PGP SIGNATURE-----