Summary
SELinux is preventing the /usr/sbin/sshd from using potentially mislabeled
files (system_u:object_r:tmp_t:s0-Unclassified_johnd).
Detailed Description
SELinux has denied /usr/sbin/sshd access to potentially mislabeled file(s)
(system_u:object_r:tmp_t:s0-Unclassified_johnd). This means that SELinux
will not allow /usr/sbin/sshd to use these files. It is common for users to
edit files in their home directory or tmp directories and then move (mv)
them to system directories. The problem is that the files end up with the
wrong file context which confined applications are not allowed to access.
Allowing Access
If you want /usr/sbin/sshd to access this files, you need to relabel them
using restorecon -v system_u:object_r:tmp_t:s0-Unclassified_johnd. You
might want to relabel the entire directory using restorecon -R -v .
Additional Information
Source Context user_u:system_r:unconfined_t:SystemLow-SystemHigh
Target Context system_u:object_r:tmp_t:s0-Unclassified
Target Objects system_u:object_r:tmp_t:s0-Unclassified_johnd [
dir ]
Affected RPM Packages openssh-server-4.3p2-16.el5 [application]
Policy RPM selinux-policy-2.4.6-30.el5
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name plugins.home_tmp_bad_labels
Host Name
Platform Linux 2.6.18-8.1.4.el5 #1 SMP
Thu May 17 01:55:38 CEST 2007 i686 i686
Alert Count 2
Line Numbers
Raw Audit Messages
avc: denied { relabelto } for comm="sshd" dev=dm-3 egid=0 euid=0
exe="/usr/sbin/sshd" exit=-13 fsgid=0 fsuid=0 gid=0 items=0
name="system_u:object_r:tmp_t:s0-Unclassified_johnd" pid=5909
scontext=user_u:system_r:unconfined_t:s0-s0:c0.c1023 sgid=0
subj=user_u:system_r:unconfined_t:s0-s0:c0.c1023 suid=0 tclass=dir
tcontext=system_u:object_r:tmp_t:s0-s0:c2 tty=(none) uid=0