This is the first one.
Summary
SELinux is preventing /sbin/rpc.statd (rpcd_t) "search" to sbin (bin_t).
Detailed Description
SELinux denied access requested by /sbin/rpc.statd. It is not expected that
this access is required by /sbin/rpc.statd and this access may signal an
intrusion attempt. It is also possible that the specific version or
configuration of the application is causing it to require additional access.
Allowing Access
Sometimes labeling problems can cause SELinux denials. You could try to
restore the default system file context for sbin, restorecon -v sbin If this
does not work, there is currently no automatic way to allow this access.
Instead, you can generate a local policy module to allow this access - see
http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable
SELinux protection altogether. Disabling SELinux protection is not
recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi
against this package.
Additional Information
Source Context system_u:system_r:rpcd_t
Target Context system_u:object_r:bin_t
Target Objects sbin [ dir ]
Affected RPM Packages nfs-utils-1.0.12-4.fc7
[application]filesystem-2.4.6-1.fc7 [target]
Policy RPM selinux-policy-2.6.4-8.fc7
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name plugins.catchall_file
Host Name cymage-laptop
Platform Linux cymage-laptop 2.6.21-1.3194.fc7 #1 SMP Wed
May 23 22:35:01 EDT 2007 i686 i686
Alert Count 1
First Seen Tue 09 Oct 2007 01:23:15 PM EDT
Last Seen Tue 09 Oct 2007 01:23:15 PM EDT
Local ID f70da51f-b723-4c5b-92ce-0791b4150752
Line Numbers
Raw Audit Messages
avc: denied { search } for comm="rpc.statd" dev=sda3 egid=0 euid=0
exe="/sbin/rpc.statd" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="sbin"
pid=5547 scontext=system_u:system_r:rpcd_t:s0 sgid=0
subj=system_u:system_r:rpcd_t:s0 suid=0 tclass=dir
tcontext=system_u:object_r:bin_t:s0 tty=(none) uid=0
This is the second one.
Summary
SELinux is preventing access to files with the default label, default_t.
Detailed Description
SELinux permission checks on files labeled default_t are being denied.
These files/directories have the default label on them. This can indicate a
labeling problem, especially if the files being referred to are not top
level directories. Any files/directories under standard system directories,
/usr, /var. /dev, /tmp, ..., should not be labeled with the default label.
The default label is for files/directories which do not have a label on a
parent directory. So if you create a new directory in / you might
legitimately get this label.
Allowing Access
If you want a confined domain to use these files you will probably need to
relabel the file/directory with chcon. In some cases it is just easier to
relabel the system, to relabel execute: "touch /.autorelabel; reboot"
Additional Information
Source Context system_u:system_r:cupsd_t:SystemLow-SystemHigh
Target Context system_u:object_r:default_t
Target Objects root [ dir ]
Affected RPM Packages filesystem-2.4.6-1.fc7 [target]
Policy RPM selinux-policy-2.6.4-8.fc7
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name plugins.default
Host Name cymage-laptop
Platform Linux cymage-laptop 2.6.21-1.3194.fc7 #1 SMP Wed
May 23 22:35:01 EDT 2007 i686 i686
Alert Count 1
First Seen Tue 09 Oct 2007 12:31:45 PM EDT
Last Seen Tue 09 Oct 2007 12:31:45 PM EDT
Local ID e262154d-ad6b-4f51-ac73-f7af15e20791
Line Numbers
Raw Audit Messages
avc: denied { search } for comm="python" dev=sda3 egid=7 euid=0
exe="/usr/bin/python" exit=-13 fsgid=7 fsuid=0 gid=7 items=0 name="root"
pid=2652 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 sgid=7
subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 suid=0 tclass=dir
tcontext=system_u:object_r:default_t:s0 tty=(none) uid=0