[LUG.ro] Interpretando mensaje...

Gustavo Cardozo cardozog en gmx.net
Vie Nov 7 09:47:23 ART 2008


Queridos Camaradas...

Alguien me podría ayudar con esto:
Cada vez que enciendo la portátil aparece este mensaje en una ventana. Tengo instalado Fedora 8, en una Compaq F566LA

Resúmen:

SELinux is preventing nm-system-setti (NetworkManager_t) "read" to ./PolicyKit
(polkit_var_lib_t).

Descripción Detallada:

SELinux denied access requested by nm-system-setti. It is not expected that this
access is required by nm-system-setti and this access may signal an intrusion
attempt. It is also possible that the specific version or configuration of the
application is causing it to require additional access.

Permitiendo Acceso:

Sometimes labeling problems can cause SELinux denials. You could try to restore
the default system file context for ./PolicyKit,

restorecon -v './PolicyKit'

If this does not work, there is currently no automatic way to allow this access.
Instead, you can generate a local policy module to allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
SELinux protection altogether. Disabling SELinux protection is not recommended.
Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
against this package.

Información Adicional:

Contexto Fuente               system_u:system_r:NetworkManager_t:s0-s0:c0.c1023
Contexto Destino              system_u:object_r:polkit_var_lib_t:s0
Objetos Destino               ./PolicyKit [ dir ]
Source                        nm-system-setti
Source Path                   /usr/sbin/nm-system-settings
Port                          <Desconocido>
Host                          joshua
Source RPM Packages           NetworkManager-0.7.0-0.11.svn4022.4.fc8
Target RPM Packages           
RPM de Políticas             selinux-policy-3.0.8-121.fc8
SELinux Activado              True
Tipo de Política             targeted
MLS Activado                  True
Modo Obediente                Enforcing
Nombre de Plugin              catchall_file
Nombre de Equipo              joshua
Plataforma                    Linux joshua 2.6.23.1-42.fc8 #1 SMP Tue Oct 30
                              13:18:33 EDT 2007 x86_64 x86_64
Cantidad de Alertas           11
First Seen                    lun 03 nov 2008 07:39:51 ARST
Last Seen                     vie 07 nov 2008 10:32:01 ARST
Local ID                      47d6a0e6-f98a-4314-84b9-4e73070e44e3
Números de Línea            

Mensajes de Auditoría Crudos 

host=joshua type=AVC msg=audit(1226061121.240:11): avc:  denied  { read } for  pid=2212 comm="nm-system-setti" name="PolicyKit" dev=sda2 ino=2485982 scontext=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 tcontext=system_u:object_r:polkit_var_lib_t:s0 tclass=dir

host=joshua type=SYSCALL msg=audit(1226061121.240:11): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=319140914e a2=306 a3=31477529f0 items=0 ppid=2211 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="nm-system-setti" exe="/usr/sbin/nm-system-settings" subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 key=(null)

Les agradezco de antemano y si necesitan algún otro dato me avisan.

-- 
Gustavo Cardozo
C.I.E.SO. - CENTRO INTERDISCIPLINARIO DE ESTUDIOS SOCIALES
www.cieso.org.ar




Más información sobre la lista de distribución Lugro