SELinux is preventing the ck-get-x11-serv from using potentially mislabeled files (<Unknown>).
Antonio Olivares
olivares14031 at yahoo.com
Mon Nov 19 13:37:18 UTC 2007
Just as I sent out the other mail about the selinux denying X I have gotten this one, what should I do? Advice/comments/suggestions are welcome.
Regards,
Antonio
Summary
SELinux is preventing the ck-get-x11-serv from using potentially mislabeled
files (<Unknown>).
Detailed Description
SELinux has denied ck-get-x11-serv access to potentially mislabeled file(s)
(<Unknown>). This means that SELinux will not allow ck-get-x11-serv to use
these files. It is common for users to edit files in their home directory
or tmp directories and then move (mv) them to system directories. The
problem is that the files end up with the wrong file context which confined
applications are not allowed to access.
Allowing Access
If you want ck-get-x11-serv to access this files, you need to relabel them
using restorecon -v <Unknown>. You might want to relabel the entire
directory using restorecon -R -v <Unknown>.
Additional Information
Source Context system_u:system_r:consolekit_t
Target Context system_u:object_r:user_home_t
Target Objects None [ file ]
Affected RPM Packages
Policy RPM selinux-policy-3.0.8-44.fc8
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name plugins.home_tmp_bad_labels
Host Name localhost
Platform Linux localhost 2.6.24-0.38.rc2.git6.fc9 #1 SMP
Fri Nov 16 17:20:39 EST 2007 i686 athlon
Alert Count 5
First Seen Sun 11 Nov 2007 09:40:02 AM CST
Last Seen Mon 19 Nov 2007 07:25:44 AM CST
Local ID fa84efec-ad7f-46d6-a356-d16d9235b774
Line Numbers
Raw Audit Messages
avc: denied { read } for comm=ck-get-x11-serv dev=dm-0 name=.Xauthority pid=2874
scontext=system_u:system_r:consolekit_t:s0 tclass=file
tcontext=system_u:object_r:user_home_t:s0
____________________________________________________________________________________
Get easy, one-click access to your favorites.
Make Yahoo! your homepage.
http://www.yahoo.com/r/hs
More information about the fedora-test-list
mailing list