BackupPC and Selinux

Thu Aug 4 10:11:52 UTC 2005

On Wed, 2005-08-03 at 09:40 -0400, Daniel J Walsh wrote:
> Daniela Gradim wrote:
> 
> >Hi !!!
> >
> >I reinstall my BackupPC server but now I have one problem when I try to
> >connect that server Error: Unable to connect to BackupPC server. I have
> >installed FC4 and selinux-policy-targeted-1.25.3-6. When I check my
> >audit log I have many kinds of AVC. What shall I do to make this
> >working.
> >
> >type=AVC_PATH msg=audit(1123052401.490:14046033):  path="/dev/console"
> >type=CWD msg=audit(1123052401.490:14046033):  cwd="/home/users/backuppc"
> >type=PATH msg=audit(1123052401.490:14046033): item=0 name="/bin/ping"
> >flags=101 inode=59080709 dev=09:01 mode=0104755 ouid=0 ogid=0 rdev=00:00
> >type=PATH msg=audit(1123052401.490:14046033): item=1 flags=101
> >inode=23531242 dev=09:01 mode=0100755 ouid=0 ogid=0 rdev=00:00
> >type=AVC msg=audit(1123052403.947:14059893): avc:  denied  { use } for
> >pid=17525 comm="ping" name="console" dev=tmpfs ino=2614
> >scontext=system_u:system_r:ping_t tcontext=system_u:system_r:init_t
> >tclass=fd
> >
> >type=AVC msg=audit(1123055904.817:14334333): avc:  denied  { ioctl } for
> >pid=20401 comm="httpd" name="Lib.pm" dev=md1 ino=70811835
> >scontext=system_u:system_r:httpd_t
> >tcontext=root:object_r:httpd_sys_script_exec_t tclass=file
> >type=SYSCALL msg=audit(1123055904.817:14334333): arch=40000003
> >syscall=54 success=no exit=-13 a0=1 a1=5401 a2=bfd1bbc8 a3=bfd1bc08
> >items=0 pid=20401 auid=4294967295 uid=501 gid=48 euid=501 suid=501
> >fsuid=501 egid=48 sgid=48 fsgid=48 comm="httpd" exe="/usr/sbin/httpd"
> >type=AVC_PATH msg=audit(1123055904.817:14334333):
> >path="/home/httpd/html/BackupPC/lib/BackupPC/Lib.pm"
> >type=AVC msg=audit(1123055904.899:14334889): avc:  denied  { ioctl } for
> >pid=2\0401 comm="httpd" name="Lib.pm" dev=md1 ino=70811823
> >scontext=system_u:system_r\:httpd_t
> >tcontext=root:object_r:httpd_sys_script_exec_t tclass=file
> >type=SYSCALL msg=audit(1123055904.899:14334889): arch=40000003
> >syscall=54 succe\ss=no exit=-13 a0=1 a1=5401 a2=bfd1bbc8 a3=bfd1bc08
> >items=0 pid=20401 auid=4294\967295 uid=501 gid=48 euid=501 suid=501
> >fsuid=501 egid=48 sgid=48 fsgid=48 comm\="httpd" exe="/usr/sbin/httpd"
> >type=AVC_PATH msg=audit(1123055904.899:14334889):
> >path="/home/httpd/html/Backu\pPC/lib/BackupPC/CGI/Lib.pm"
> >type=AVC msg=audit(1123055904.961:14334904): avc:  denied  { ioctl } for
> >pid=2\0401 comm="httpd" name="config.pl" dev=md1 ino=70812030
> >scontext=system_u:syste\m_r:httpd_t
> >tcontext=root:object_r:httpd_sys_script_exec_t tclass=file
> >type=SYSCALL msg=audit(1123055904.961:14334904): arch=40000003
> >syscall=54 succe\ss=no exit=-13 a0=1 a1=5401 a2=bfd1c0f8 a3=bfd1c138
> >items=0 pid=20401 auid=4294\967295 uid=501 gid=48 euid=501 suid=501
> >fsuid=501 egid=48 sgid=48 fsgid=48 comm\="httpd" exe="/usr/sbin/httpd"
> >type=AVC_PATH msg=audit(1123055904.961:14334904):
> >path="/home/httpd/html/Backu\pPC/data/conf/config.pl"
> >type=AVC msg=audit(1123055904.968:14334926): avc:  denied  { ioctl } for
> >pid=2\0401 comm="httpd" name="en.pm" dev=md1 ino=70811804
> >scontext=system_u:system_r:\httpd_t
> >tcontext=root:object_r:httpd_sys_script_exec_t tclass=file
> >type=SYSCALL msg=audit(1123055904.968:14334926): arch=40000003
> >syscall=54 succe\ss=no exit=-13 a0=1 a1=5401 a2=bfd1c0f8 a3=bfd1c138
> >items=0 pid=20401 auid=4294\967295 uid=501 gid=48 euid=501 suid=501
> >fsuid=501 egid=48 sgid=48 fsgid=48 comm\="httpd" exe="/usr/sbin/httpd"
> >type=AVC_PATH msg=audit(1123055904.968:14334926):
> >path="/home/httpd/html/Backu\pPC/lib/BackupPC/Lang/en.pm"
> >type=AVC msg=audit(1123055904.980:14334955): avc:  denied  { ioctl } for
> >pid=2\0401 comm="httpd" name="hosts" dev=md1 ino=70812028
> >scontext=system_u:system_r:\httpd_t
> >tcontext=root:object_r:httpd_sys_script_exec_t tclass=file
> >type=SYSCALL msg=audit(1123055904.980:14334955): arch=40000003
> >syscall=54 succe\ss=no exit=-13 a0=1 a1=5401 a2=bfd1c148 a3=bfd1c188
> >items=0 pid=20401 auid=4294\967295 uid=501 gid=48 euid=501 suid=501
> >fsuid=501 egid=48 sgid=48 fsgid=48 comm\="httpd" exe="/usr/sbin/httpd"
> >type=AVC_PATH msg=audit(1123055904.980:14334955):
> >path="/home/httpd/html/Backu\pPC/data/conf/hosts"
> >type=AVC msg=audit(1123055904.982:14334964): avc:  denied  { ioctl } for
> >pid=20401 comm="httpd" name="GeneralInfo.pm" dev=md1 ino=70811807
> >scontext=system_u:\system_r:httpd_t
> >tcontext=root:object_r:httpd_sys_script_exec_t tclass=file
> >type=SYSCALL msg=audit(1123055904.982:14334964): arch=40000003
> >syscall=54 succe\ss=no exit=-13 a0=1 a1=5401 a2=bfd1c0f8 a3=bfd1c138
> >items=0 pid=20401 auid=4294\967295 uid=501 gid=48 euid=501 suid=501
> >fsuid=501 egid=48 sgid=48 fsgid=48 comm\="httpd" exe="/usr/sbin/httpd"
> >type=AVC_PATH msg=audit(1123055904.982:14334964):
> >path="/home/httpd/html/Backu\pPC/lib/BackupPC/type=AVC msg=audit
> >(1123057381.490:15261737): avc:  denied  { lock } for  pid=20\404
> >comm="httpd" name="LOCK" dev=md1 ino=70811933
> >scontext=system_u:system_r:ht\tpd_t
> >tcontext=system_u:object_r:httpd_sys_script_exec_t tclass=file
> >type=SYSCALL msg=audit(1123057381.490:15261737): arch=40000003
> >syscall=143 succ\ess=no exit=-13 a0=0 a1=2 a2=10ebbc0 a3=9ad4700 items=0
> >pid=20404 auid=42949672\95 uid=501 gid=48 euid=501 suid=501 fsuid=501
> >egid=48 sgid=48 fsgid=48 comm="ht\tpd" exe="/usr/sbin/httpd"
> >type=AVC_PATH msg=audit(1123057381.490:15261737):
> >path="/home/httpd/html/Backu\pPC/data/pc/7r04b0j/LOCK"
> >type=AVC msg=audit(1123057387.694:15262203): avc:  denied  { write } for
> >pid=2\0404 comm="httpd" name="BackupPC.sock" dev=md1 ino=70811920
> >scontext=system_u:s\ystem_r:httpd_t
> >tcontext=system_u:object_r:httpd_sys_script_exec_t tclass=sock_\file
> >type=SYSCALL msg=audit(1123057387.694:15262203): arch=40000003
> >syscall=102 succ\ess=no exit=-13 a0=3 a1=bfd1c490 a2=10ebbc0 a3=6e
> >items=1 pid=20404 auid=429496\7295 uid=501 gid=48 euid=501 suid=501
> >fsuid=501 egid=48 sgid=48 fsgid=48 comm="\httpd" exe="/usr/sbin/httpd"
> >type=SOCKADDR msg=audit(1123057387.694:15262203):
> >saddr=01002F686F6D652F6874747
> >\0642F68746D6C2F4261636B757050432F646174612F6C6F672F4261636B757050432E736F636B00\0000000000000000000000000000000000000000000000000000000000000000000000000000000\000000000000000000000000000000000000000
> >type=SOCKETCALL msg=audit(1123057387.694:15262203): nargs=3 a0=1
> >a1=9e9c5c8 a2=\6e
> >type=PATH msg=audit(1123057387.694:15262203): item=0 flags=1
> >inode=70811920 de\v=09:01 mode=0140750 ouid=501 ogid=3 rdev=00:00
> >CGI/GeneralInfo.pm"
> >type=AVC msg=audit(1123055904.988:14334976): avc:  denied  { write } for
> >pid=2\0401 comm="httpd" name="BackupPC.sock" dev=md1 ino=70811920
> >scontext=system_u:s\ystem_r:httpd_t
> >tcontext=system_u:object_r:httpd_sys_script_exec_t tclass=sock_\file
> >type=SYSCALL msg=audit(1123055904.988:14334976): arch=40000003
> >syscall=102 succ\ess=no exit=-13 a0=3 a1=bfd1c490 a2=10ebbc0 a3=6e
> >items=1 pid=20401 auid=429496\7295 uid=501 gid=48 euid=501 suid=501
> >fsuid=501 egid=48 sgid=48 fsgid=48 comm="\httpd" exe="/usr/sbin/httpd"
> >type=SOCKADDR msg=audit(1123055904.988:14334976):
> >saddr=01002F686F6D652F6874747
> >\0642F68746D6C2F4261636B757050432F646174612F6C6F672F4261636B757050432E736F636B00\0000000000000000000000000000000000000000000000000000000000000000000000000000000\000000000000000000000000000000000000000
> >type=SOCKETCALL msg=audit(1123055904.988:14334976): nargs=3 a0=1
> >a1=9e67f28 a2=\6e
> >type=PATH msg=audit(1123055904.988:14334976): item=0 flags=1
> >inode=70811920 de\v=09:01 mode=0140750 ouid=501 ogid=3 rdev=00:00
> >type=AVC msg=audit(1123055907.166:14335286): avc:  denied  { write } for
> >pid=2\0401 comm="httpd" name="BackupPC.sock" dev=md1 ino=70811920
> >scontext=system_u:s\ystem_r:httpd_t
> >tcontext=system_u:object_r:httpd_sys_script_exec_t tclass=sock_\file
> >type=SYSCALL msg=audit(1123055907.166:14335286): arch=40000003
> >syscall=102 succ\ess=no exit=-13 a0=3 a1=bfd1c490 a2=10ebbc0 a3=6e
> >items=1 pid=20401 auid=429496\7295 uid=501 gid=48 euid=501 suid=501
> >fsuid=501 egid=48 sgid=48 fsgid=48 comm="\httpd" exe="/usr/sbin/httpd"
> >type=SOCKADDR msg=audit(1123055907.166:14335286):
> >saddr=01002F686F6D652F6874747
> >\0642F68746D6C2F4261636B757050432F646174612F6C6F672F4261636B757050432E736F636B00\0000000000000000000000000000000000000000000000000000000000000000000000000000000\000000000000000000000000000000000000000
> >type=SOCKETCALL msg=audit(1123055907.166:14335286): nargs=3 a0=d
> >a1=9e7ea88 a2=\6e
> >type=PATH msg=audit(1123055907.166:14335286): item=0 flags=1
> >inode=70811920 de\v=09:01 mode=0140750 ouid=501 ogid=3 rdev=00:00
> >
> >
> >Best Regards
> >
> >  
> >
> Why is everything labeled httpd_sys_script_exec_t?
> Only the beginning script should be, these files should be labeled 
> httpd_sys_content_t, to get rid of most of the warnings.  The sock_file 
> will require a policy update although you can label it httpd_var_run_t 
> for a workaround.
> 

Tanks for your help. I change the httpd_sys_script_exec_t now I don't
have more the warnings. I still have a problem with the sock_file, I
update the policy and now the message error change. Now I have this
version selinux-policy-targeted-1.25.3-9.

type=AVC msg=audit(1123150177.621:5759070): avc:  denied  { connectto }
for  pid=20403 comm="httpd" name="BackupPC.sock"
scontext=system_u:system_r:httpd_t tcontext=system_u:system_r:initrc_t
tclass=unix_stream_socket
type=SYSCALL msg=audit(1123150177.621:5759070): arch=40000003
syscall=102 success=no exit=-13 a0=3 a1=bfd1c490 a2=10ebbc0 a3=6e
items=1 pid=20403 auid=4294967295 uid=501 gid=48 euid=501 suid=501
fsuid=501 egid=48 sgid=48 fsgid=48 comm="httpd" exe="/usr/sbin/httpd"
type=AVC_PATH msg=audit(1123150177.621:5759070):
path="/home/httpd/html/BackupPC/data/log/BackupPC.sock"
type=SOCKADDR msg=audit(1123150177.621:5759070):
saddr=01002F686F6D652F68747470642F68746D6C2F4261636B757050432F646174612F6C6F672F4261636B757050432E736F636B000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
type=SOCKETCALL msg=audit(1123150177.621:5759070): nargs=3 a0=1
a1=9fcabd8 a2=6etype=PATH msg=audit(1123150177.621:5759070): item=0
flags=1  inode=70811920 dev=09:01 mode=0140750 ouid=501 ogid=3
rdev=00:00

One thing more what means this message above

type=AVC msg=audit(1123149608.771:5722457): avc:  denied  { use } for
pid=32158 comm="ping" name="console" dev=tmpfs ino=2614
scontext=system_u:system_r:ping_t tcontext=system_u:system_r:init_t
tclass=fd
type=SYSCALL msg=audit(1123149608.771:5722457): arch=40000003 syscall=11
success=yes exit=0 a0=a295650 a1=a290ff0 a2=9cf3b38 a3=bfb69718 items=2
pid=32158 auid=4294967295 uid=501 gid=3 euid=0 suid=0 fsuid=0 egid=3
sgid=3 fsgid=3 comm="ping" exe="/bin/ping"
type=AVC_PATH msg=audit(1123149608.771:5722457):  path="/dev/console"
type=CWD msg=audit(1123149608.771:5722457):  cwd="/home/users/backuppc"
type=PATH msg=audit(1123149608.771:5722457): item=0 name="/bin/ping"
flags=101 inode=59080709 dev=09:01 mode=0104755 ouid=0 ogid=0 rdev=00:00
type=PATH msg=audit(1123149608.771:5722457): item=1 flags=101
inode=23531242 dev=09:01 mode=0100755 ouid=0 ogid=0 rdev=00:00

Best Regards.

-- 
--  
Daniela Gradim 
B.Sc.

daniela.gradim at fortevisiomedica.com 
Mobile phone: +46-(0)765-48 99 95

---------------------------------------------------------------------  
Forte Visio Medica AB 
Hammarby Fabriksväg 23 
S-120 33 Stockholm 
Sweden

Phone: +46-(0)8-440 03 00 
Fax: +46-(0)765-310 100 
--------------------------------------------------------------------- 
THIS COMMUNICATION IS ONLY INTENDED FOR THE USE OF THE INDIVIDUAL, OR 
ENTITY, TO WHICH IT IS DIRECTED AND MAY CONTAIN INFORMATION THAT IS 
PRIVILIGED, CONFIDENTIAL AND EXEMPT FROM DISCLOSURE UNDER APPLICABLE 
LAW. IF RECEIVED IN ERROR: PLEASE NOTIFY US IMMEDIATELY THROUGH 
info at fortevisiomedica.com. 
---------------------------------------------------------------------