| Description | Description of problem:
SELinux is preventing /usr/bin/gnome-thumbnail-font from using the nnp_transition, nosuid_transition access on a process.
***** Plugin catchall (100. confidence) suggests **************************
If you believe that gnome-thumbnail-font should be allowed nnp_transition nosuid_transition access on processes labeled thumb_t by default.
Then 이 버그를 보고해야 합니다.
이러한 액세스를 허용하기 위해 로컬 정채 모듈을 생성할 수 있습니다.
Do
allow this access for now by executing:
# ausearch -c 'gnome-thumbnail' --raw | audit2allow -M my-gnomethumbnail
# semodule -i my-gnomethumbnail.pp
Additional Information:
Source Context unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1
023
Target Context unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023
Target Objects Unknown [ process2 ]
Source gnome-thumbnail
Source Path /usr/bin/gnome-thumbnail-font
Port <Unknown>
Host (removed)
Source RPM Packages gnome-font-viewer-3.28.0-1.el7.x86_64
Target RPM Packages
Policy RPM selinux-policy-3.13.1-229.el7_6.9.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name (removed)
Platform Linux (removed) 3.10.0-957.5.1.el7.x86_64 #1 SMP
Fri Feb 1 14:54:57 UTC 2019 x86_64 x86_64
Alert Count 34
First Seen 2019-03-13 17:59:19 KST
Last Seen 2019-03-13 23:36:00 KST
Local ID 1565ee26-d8ba-4ec6-a04b-74bff2924c22
Raw Audit Messages
type=AVC msg=audit(1552487760.826:7728): avc: denied { nnp_transition nosuid_transition } for pid=41780 comm="flatpak-bwrap" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tclass=process2 permissive=0
type=SYSCALL msg=audit(1552487760.826:7728): arch=x86_64 syscall=execve success=yes exit=0 a0=7fff8b88ca67 a1=7fff8b88f0a0 a2=18a0160 a3=7fff8b88c5a0 items=0 ppid=41777 pid=41780 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=1 comm=gnome-thumbnail exe=/usr/bin/gnome-thumbnail-font subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
Hash: gnome-thumbnail,unconfined_t,thumb_t,process2,nnp_transition,nosuid_transition
Version-Release number of selected component:
selinux-policy-3.13.1-229.el7_6.9.noarch
|
|---|
