[root@www log]# sealert -l c178214b-fb30-48c5-a597-09b641882067
Summary
SELinux is preventing /sbin/e2label (fsadm_t) "read write" to
/var/webmin/sessiondb.dir (var_t).
Detailed Description
SELinux denied /sbin/e2label access to /var/webmin/sessiondb.dir. If this is
a swapfile it has to have a file context label of swapfile_t. If you did not
intend to use /var/webmin/sessiondb.dir as a swapfile it probably indicates
a bug, however it could also signal a intrusion attempt.
Allowing Access
You can alter the file context by executing chcon -t swapfile_t
/var/webmin/sessiondb.dir
The following command will allow this access:
chcon x-t swapfile_t /var/webmin/sessiondb.dir
Additional Information
Source Context system_u:system_r:fsadm_t
Target Context root:object_r:var_t
Target Objects /var/webmin/sessiondb.dir [ file ]
Affected RPM Packages e2fsprogs-1.39-10.el5_1.1 [application]
Policy RPM selinux-policy-2.4.6-106.el5_1.3
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name plugins.swapfile
Host Name siteshelfnet.theplanet.host
Platform Linux siteshelfnet.theplanet.host
2.6.18-53.1.6.el5 #1 SMP Wed Jan 16 03:56:43 EST
2008 i686 i686
Alert Count 90
Line Numbers
Raw Audit Messages
avc: denied { read, write } for comm="e2label" dev=sda3 egid=0 euid=0
exe="/sbin/e2label" exit=0 fsgid=0 fsuid=0 gid=0 items=0
path="/var/webmin/sessiondb.dir" pid=30629 scontext=system_u:system_r:fsadm_t:s0
sgid=0 subj=system_u:system_r:fsadm_t:s0 suid=0 tclass=file
tcontext=root:object_r:var_t:s0 tty=(none) uid=0