Results 1 to 4 of 4
Summary:
SELinux is preventing the npviewer.bin from using potentially mislabeled files
(./root).
Detailed Description:
SELinux has denied npviewer.bin access to potentially mislabeled file(s)
(./root). This means that SELinux will not ...
- 06-12-2009 #1Just Joined!
- Join Date
- Jun 2009
- Posts
- 41
SELinux AVC denial
Summary:
SELinux is preventing the npviewer.bin from using potentially mislabeled files
(./root).
Detailed Description:
SELinux has denied npviewer.bin access to potentially mislabeled file(s)
(./root). This means that SELinux will not allow npviewer.bin to use these
files. It is common for users to edit files in their home directory or tmp
directories and then move (mv) them to system directories. The problem is that
the files end up with the wrong file context which confined applications are not
allowed to access.
Allowing Access:
If you want npviewer.bin to access this files, you need to relabel them using
restorecon -v './root'. You might want to relabel the entire directory using
restorecon -R -v './root'.
Additional Information:
Source Context unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c102
3
Target Context system_u:object_r:admin_home_t:s0
Target Objects ./root [ dir ]
Source npviewer.bin
Source Path /usr/lib/nspluginwrapper/npviewer.bin
Port <Unknown>
Host karthick
Source RPM Packages nspluginwrapper-1.1.2-4.fc10
Target RPM Packages filesystem-2.4.19-1.fc10
Policy RPM selinux-policy-3.5.13-18.fc10
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name home_tmp_bad_labels
Host Name karthick
Platform Linux karthick 2.6.27.5-117.fc10.i686 #1 SMP Tue
Nov 18 12:19:59 EST 2008 i686 i686
Alert Count 524
First Seen Fri 12 Jun 2009 06:05:50 PM IST
Last Seen Fri 12 Jun 2009 06:23:38 PM IST
Local ID 04bf8d46-516b-49d0-9f99-77a2e32a422a
Line Numbers
Raw Audit Messages
node=karthick type=AVC msg=audit(1244811218.756:3984): avc: denied { search } for pid=5247 comm="npviewer.bin" name="root" dev=dm-0 ino=1843201 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir
node=karthick type=SYSCALL msg=audit(1244811218.756:3984): arch=40000003 syscall=5 success=no exit=-13 a0=bfef4690 a1=0 a2=3383cc a3=8 items=0 ppid=4626 pid=5247 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null)
What it mean?
- 06-12-2009 #2Just Joined!
- Join Date
- May 2008
- Posts
- 12
It means it is stopping nspluginwrapper from accessing the /root home directory. Are you running your box as root? I ask because I am not sure why npviewer.bin would need access to ./root. It's also possible that the ./root directory has become mislabeled somehow.
At any rate, the answer is there in the message. Open a shell as root and run:
Code:restorecon -R -v './root'
- 06-13-2009 #3Just Joined!
- Join Date
- Jun 2009
- Posts
- 41
S i am running as root..And thank you so much,the problem was solved...
- 06-13-2009 #4Just Joined!
- Join Date
- May 2008
- Posts
- 12


Reply With Quote
