View Issue Details

IDProjectCategoryView StatusLast Update
0009926CentOS-7selinux-policypublic2020-01-28 18:28
Reporterattafi 
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
PlatformOSOS Version7
Product Version 
Target VersionFixed in Version 
Summary0009926: SELinux is preventing /usr/libexec/abrt-handle-event from 'create' accesses on the lnk_file .lock.
DescriptionDescription of problem:
Hi

It is just happened when i turned on the workstation

Best regrads
SELinux is preventing /usr/libexec/abrt-handle-event from 'create' accesses on the lnk_file .lock.

***** Plugin catchall (100. confidence) suggests **************************

If you believe that abrt-handle-event should be allowed create access on the .lock lnk_file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep abrt-handle-eve /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context system_u:system_r:abrt_t:s0-s0:c0.c1023
Target Context system_u:object_r:var_spool_t:s0
Target Objects .lock [ lnk_file ]
Source abrt-handle-eve
Source Path /usr/libexec/abrt-handle-event
Port <Unknown>
Host (removed)
Source RPM Packages abrt-dbus-2.1.11-36.el7.centos.x86_64
Target RPM Packages
Policy RPM selinux-policy-3.13.1-60.el7.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name (removed)
Platform Linux (removed) 3.10.0-327.3.1.el7.x86_64 #1 SMP
                              Wed Dec 9 14:09:15 UTC 2015 x86_64 x86_64
Alert Count 11
First Seen 2015-12-16 12:00:29 CET
Last Seen 2015-12-16 12:53:51 CET
Local ID 93a6780b-02fa-4830-853b-beeb81622fda

Raw Audit Messages
type=AVC msg=audit(1450266831.923:453): avc: denied { create } for pid=4830 comm="abrt-dbus" name=".lock" scontext=system_u:system_r:abrt_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_spool_t:s0 tclass=lnk_file


type=SYSCALL msg=audit(1450266831.923:453): arch=x86_64 syscall=symlinkat success=no exit=EACCES a0=7ffc36052e90 a1=7 a2=7f00691c3b32 a3=0 items=0 ppid=1 pid=4830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=abrt-dbus exe=/usr/sbin/abrt-dbus subj=system_u:system_r:abrt_t:s0-s0:c0.c1023 key=(null)

Hash: abrt-handle-eve,abrt_t,var_spool_t,lnk_file,create

Version-Release number of selected component:
selinux-policy-3.13.1-60.el7.noarch
Additional Informationreporter: libreport-2.1.11
hashmarkername: setroubleshoot
kernel: 3.10.0-327.3.1.el7.x86_64
type: libreport
uid: 0
TagsNo tags attached.
abrt_hashe6d8aa5ac59197d8ab49dc67ad665befafc505d59628eb502b8e112e9dfd1e4e
URL

Activities

attafi

attafi

2015-12-16 12:14

reporter   ~0025093

Another user experienced a similar problem:

hi

This happened when i plugged usb stick

reporter: libreport-2.1.11
hashmarkername: setroubleshoot
kernel: 3.10.0-327.3.1.el7.x86_64
package: selinux-policy-3.13.1-60.el7.noarch
reason: SELinux is preventing /usr/libexec/abrt-handle-event from 'create' accesses on the lnk_file .lock.
type: libreport
uid: 0
jacquesv

jacquesv

2015-12-31 17:11

reporter   ~0025226

hi,

I also experience this error though this happens to me when I login with "su" from a standard user account:

SELinux is preventing /usr/libexec/abrt-handle-event from create access on the lnk_file .lock.
rubenalfonso

rubenalfonso

2016-01-08 01:28

reporter   ~0025297

Another user experienced a similar problem:

Solo ejecute las actualizaciones despu
ohw0571

ohw0571

2016-07-01 10:53

reporter   ~0027007

Hello,

this issue is solved by fixing the selinux context of /var/spool/abrt:

"restorecon -R -v /var/spool/abrt"

The settings seem to be wrong by default; at least the problem appeared when running "su -" on every CentOS 7 machine I set up so far.
mshekharc

mshekharc

2017-01-14 02:36

reporter   ~0028355

Another user experienced a similar problem:

I tried installaing docker and faced this issue. FYI CentOS is running as a Virtual Machine on Windows 8.1 via VMware Workstation 12 Pro.

reporter: libreport-2.1.11.1
hashmarkername: setroubleshoot
kernel: 3.10.0-514.2.2.el7.x86_64
package: selinux-policy-3.13.1-102.el7_3.7.noarch
reason: SELinux is preventing abrt-handle-eve from 'create' accesses on the lnk_file .lock.
reproducible: Not sure how to reproduce the problem
type: libreport
wq5674690

wq5674690

2017-06-03 23:45

reporter   ~0029396

Another user experienced a similar problem:

1

reporter: libreport-2.1.11.1
hashmarkername: setroubleshoot
kernel: 3.10.0-514.21.1.el7.x86_64
package: selinux-policy-3.13.1-102.el7_3.16.noarch
reason: SELinux is preventing abrt-handle-eve from 'create' accesses on the lnk_file .lock.
reproducible: Not sure how to reproduce the problem
type: libreport
yglaj

yglaj

2020-01-28 18:28

reporter   ~0036149

Another user experienced a similar problem:

After running yum update

reporter: libreport-2.1.11.1
hashmarkername: setroubleshoot
kernel: 3.10.0-229.el7.x86_64
package: selinux-policy-3.13.1-252.el7_7.6.noarch
reason: SELinux is preventing /usr/libexec/abrt-handle-event from 'create' accesses on the lnk_file .lock.
reproducible: Not sure how to reproduce the problem
type: libreport

Issue History

Date Modified Username Field Change
2015-12-16 12:08 attafi New Issue
2015-12-16 12:14 attafi Note Added: 0025093
2015-12-31 17:11 jacquesv Note Added: 0025226
2016-01-08 01:28 rubenalfonso Note Added: 0025297
2016-07-01 10:53 ohw0571 Note Added: 0027007
2017-01-14 02:36 mshekharc Note Added: 0028355
2017-06-03 23:45 wq5674690 Note Added: 0029396
2020-01-28 18:28 yglaj Note Added: 0036149