View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0015918 | CentOS-7 | selinux-policy | public | 2019-03-14 01:16 | 2019-03-14 01:16 |
| Reporter | slow33 | ||||
| Priority | normal | Severity | minor | Reproducibility | have not tried |
| Status | new | Resolution | open | ||
| Platform | OS | OS Version | 7 | ||
| Product Version | |||||
| Target Version | Fixed in Version | ||||
| Summary | 0015918: SELinux is preventing /usr/bin/gnome-thumbnail-font from using the nnp_transition, nosuid_transition access on a process. | ||||
| Description | Description of problem: SELinux is preventing /usr/bin/gnome-thumbnail-font from using the nnp_transition, nosuid_transition access on a process. ***** Plugin catchall (100. confidence) suggests ************************** If you believe that gnome-thumbnail-font should be allowed nnp_transition nosuid_transition access on processes labeled thumb_t by default. Then 이 버그를 보고해야 합니다. 이러한 액세스를 허용하기 위해 로컬 정채 모듈을 생성할 수 있습니다. Do allow this access for now by executing: # ausearch -c 'gnome-thumbnail' --raw | audit2allow -M my-gnomethumbnail # semodule -i my-gnomethumbnail.pp Additional Information: Source Context unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1 023 Target Context unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 Target Objects Unknown [ process2 ] Source gnome-thumbnail Source Path /usr/bin/gnome-thumbnail-font Port <Unknown> Host (removed) Source RPM Packages gnome-font-viewer-3.28.0-1.el7.x86_64 Target RPM Packages Policy RPM selinux-policy-3.13.1-229.el7_6.9.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 3.10.0-957.5.1.el7.x86_64 #1 SMP Fri Feb 1 14:54:57 UTC 2019 x86_64 x86_64 Alert Count 34 First Seen 2019-03-13 17:59:19 KST Last Seen 2019-03-13 23:36:00 KST Local ID 1565ee26-d8ba-4ec6-a04b-74bff2924c22 Raw Audit Messages type=AVC msg=audit(1552487760.826:7728): avc: denied { nnp_transition nosuid_transition } for pid=41780 comm="flatpak-bwrap" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tclass=process2 permissive=0 type=SYSCALL msg=audit(1552487760.826:7728): arch=x86_64 syscall=execve success=yes exit=0 a0=7fff8b88ca67 a1=7fff8b88f0a0 a2=18a0160 a3=7fff8b88c5a0 items=0 ppid=41777 pid=41780 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=1 comm=gnome-thumbnail exe=/usr/bin/gnome-thumbnail-font subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) Hash: gnome-thumbnail,unconfined_t,thumb_t,process2,nnp_transition,nosuid_transition Version-Release number of selected component: selinux-policy-3.13.1-229.el7_6.9.noarch | ||||
| Additional Information | reporter: libreport-2.1.11.1 hashmarkername: setroubleshoot kernel: 3.10.0-957.5.1.el7.x86_64 reproducible: Not sure how to reproduce the problem type: libreport | ||||
| Tags | No tags attached. | ||||
| abrt_hash | 4ca3f366052ffd7a5506f3a76074be1a4a1fa032d6f1b5b36475aea31ed00dbe | ||||
| URL | |||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2019-03-14 01:16 | slow33 | New Issue |
