SELinux is preventing mkdir from write access on the directory root.

Lawrence E Graves lgraves95 at gmail.com
Sat Mar 21 18:03:20 UTC 2015


SELinux is preventing mkdir from write access on the directory root.

***** Plugin catchall (100. confidence) suggests **************************

If you believe that mkdir should be allowed write access on the root 
directory by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep mkdir /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context system_u:system_r:system_mail_t:s0
Target Context system_u:object_r:root_t:s0
Target Objects root [ dir ]
Source mkdir
Source Path mkdir
Port <Unknown>
Host Jehovah.local
Source RPM Packages
Target RPM Packages filesystem-3.2-28.fc21.x86_64
Policy RPM selinux-policy-3.13.1-105.6.fc21.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name Jehovah.local
Platform Linux Jehovah.local 3.19.1-201.fc21.x86_64 #1 SMP
Wed Mar 18 04:29:24 UTC 2015 x86_64 x86_64
Alert Count 1
First Seen 2015-03-21 11:32:05 MDT
Last Seen 2015-03-21 11:32:05 MDT
Local ID 9c04ff34-015f-4e54-b46e-82254ed54bcb

Raw Audit Messages
type=AVC msg=audit(1426959125.849:616): avc: denied { write } for 
pid=4184 comm="mkdir" name="root" dev="sda3" ino=256 
scontext=system_u:system_r:system_mail_t:s0 
tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0


Hash: mkdir,system_mail_t,root_t,dir,write

-- 
All things are workable but don't all things work.
Prov. 3:5 & 6



More information about the users mailing list