View Issue Details

IDProjectCategoryView StatusLast Update
0013791CentOS-7selinux-policypublic2017-09-12 08:22
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
PlatformOSOS Version7
Product Version 
Target VersionFixed in Version 
Summary0013791: SELinux is preventing /usr/bin/python2.7 from 'open' accesses on the file /usr/lib/python2.7/site-packages/nagios-0.0.8-py2.7...
DescriptionDescription of problem:
SELinux is preventing /usr/bin/python2.7 from 'open' accesses on the file /usr/lib/python2.7/site-packages/nagios-0.0.8-py2.7.egg.

***** Plugin restorecon (99.5 confidence) suggests ************************

If you want to fix the label.
/usr/lib/python2.7/site-packages/nagios-0.0.8-py2.7.egg default label should be lib_t.
Then you can run restorecon.
# /sbin/restorecon -v /usr/lib/python2.7/site-packages/nagios-0.0.8-py2.7.egg

***** Plugin catchall (1.49 confidence) suggests **************************

If you believe that python2.7 should be allowed open access on the nagios-0.0.8-py2.7.egg file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
allow this access for now by executing:
# ausearch -c 'firewalld' --raw | audit2allow -M my-firewalld
# semodule -i my-firewalld.pp

Additional Information:
Source Context system_u:system_r:firewalld_t:s0
Target Context unconfined_u:object_r:user_tmp_t:s0
Target Objects /usr/lib/python2.7/site-
                              packages/nagios-0.0.8-py2.7.egg [ file ]
Source firewalld
Source Path /usr/bin/python2.7
Port <Unknown>
Host (removed)
Source RPM Packages python-2.7.5-48.el7.x86_64
Target RPM Packages
Policy RPM selinux-policy-3.13.1-102.el7_3.16.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name (removed)
Platform Linux (removed) 3.10.0-514.26.2.el7.x86_64 #1 SMP
                              Tue Jul 4 15:04:05 UTC 2017 x86_64 x86_64
Alert Count 1
First Seen 2017-09-08 22:03:07 EDT
Last Seen 2017-09-08 22:03:07 EDT
Local ID 0a36afc1-1316-4dec-b266-3f71cfe0b562

Raw Audit Messages
type=AVC msg=audit(1504922587.76:33946): avc: denied { open } for pid=1168 comm="firewalld" path="/usr/lib/python2.7/site-packages/nagios-0.0.8-py2.7.egg" dev="dm-0" ino=136036 scontext=system_u:system_r:firewalld_t:s0 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=file

type=SYSCALL msg=audit(1504922587.76:33946): arch=x86_64 syscall=open success=no exit=EACCES a0=7ffe07d79d50 a1=0 a2=1b6 a3=24 items=0 ppid=1 pid=1168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=firewalld exe=/usr/bin/python2.7 subj=system_u:system_r:firewalld_t:s0 key=(null)

Hash: firewalld,firewalld_t,user_tmp_t,file,open

Version-Release number of selected component:
Additional Informationreporter: libreport-
hashmarkername: setroubleshoot
kernel: 3.10.0-514.26.2.el7.x86_64
reproducible: Not sure how to reproduce the problem
type: libreport


There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2017-09-12 08:21 jameser01 New Issue
2017-09-12 08:21 jameser01 Issue generated from: 0013785
2017-09-12 08:22 jameser01 Tag Attached: d
2017-09-12 08:25 jameser01 Issue cloned: 0013792