SELinux is preventing dbus-daemon-lau(/lib/dbus-1/dbus-daemon-launch-helper)

[Antonio Olivares]

Dear all,

As of updates to machine rawhide report 20080126, I
get the following warning from setroubleshoot:

Is it related to the previous one, dbus-daemon, or is
it a new one?

Thanks,

Antonio 

Summary:

SELinux is preventing
dbus-daemon-lau(/lib/dbus-1/dbus-daemon-launch-helper)
(system_dbusd_t) "execute" to <Unknown>
(consolekit_exec_t).

Detailed Description:

SELinux denied access requested by
dbus-daemon-lau(/lib/dbus-1/dbus-daemon-launch-helper).
It is not expected that
this access is required by
dbus-daemon-lau(/lib/dbus-1/dbus-daemon-launch-helper)
and this access may
signal an intrusion attempt. It is also possible that
the specific version or
configuration of the application is causing it to
require additional access.

Allowing Access:

Sometimes labeling problems can cause SELinux denials.
You could try to restore
the default system file context for <Unknown>,

restorecon -v <Unknown>

If this does not work, there is currently no automatic
way to allow this access.
Instead, you can generate a local policy module to
allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385)
Or you can disable
SELinux protection altogether. Disabling SELinux
protection is not recommended.
Please file a bug report
(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
against this package.

Additional Information:

Source Context               
system_u:system_r:system_dbusd_t
Target Context               
system_u:object_r:consolekit_exec_t
Target Objects                None [ file ]
Source                       
dbus-daemon-lau(/lib/dbus-1/dbus-daemon-launch-
                              helper)
Port                          <Unknown>
Host                          localhost
Source RPM Packages           
Target RPM Packages           
Policy RPM                   
selinux-policy-3.2.5-19.fc9
Selinux Enabled               True
Policy Type                   targeted
MLS Enabled                   True
Enforcing Mode                Enforcing
Plugin Name                   catchall_file
Host Name                     localhost
Platform                      Linux localhost
2.6.24-2.fc9 #1 SMP Fri Jan 25
                              13:14:54 EST 2008 i686
athlon
Alert Count                   17
First Seen                    Sat 26 Jan 2008 02:17:08
PM CST
Last Seen                     Sat 26 Jan 2008 02:18:52
PM CST
Local ID                     
49f54895-d96b-44a0-8144-e7c4e8b3965f
Line Numbers                  

Raw Audit Messages            

host=localhost type=AVC msg=audit(1201378732.288:37):
avc:  denied  { execute } for  pid=2640
comm="dbus-daemon-lau" name="console-kit-daemon"
dev=dm-0 ino=32542536
scontext=system_u:system_r:system_dbusd_t:s0
tcontext=system_u:object_r:consolekit_exec_t:s0
tclass=file

host=localhost type=SYSCALL
msg=audit(1201378732.288:37): arch=40000003 syscall=11
success=no exit=-13 a0=9750020 a1=974fc80 a2=974f008
a3=60099c items=0 ppid=2639 pid=2640 auid=4294967295
uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0
fsgid=0 tty=(none) comm="dbus-daemon-lau"
exe="/lib/dbus-1/dbus-daemon-launch-helper"
subj=system_u:system_r:system_dbusd_t:s0 key=(null)





      ____________________________________________________________________________________
Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs