- Modifié
j'ai un message de selinux qui apparait sans cesse :
Résumé:
SELinux empêche /usr/sbin/prelink (/usr/sbin/prelink) d'"unlink" à (etc_t).
Description détaillée:
SELinux denied prelink unlink on . The prelink program is only allowed to manipulate files that are identified as executables or shared libraries by SELinux. Libraries that get placed in lib directories get labeled by default as a shared library. Similarly, executables that get placed in a bin or sbin directory get labeled as executables by SELinux. However, if these files get installed in other directories they might not get the correct label. If prelink is trying to manipulate a file that is not a binary or share library this may indicate an intrusion attack.Autoriser l'accèsYou can alter the file context by executing "chcon -t bin_t " or "chcon -t lib_t " if it is a shared library. If you want to make these changes permanent you must execute the semanage command. "semanage fcontext -a -t bin_t " or "semanage fcontext -a -t shlib_t ". If you feel this executable/shared library is in the wrong location please file a bug against the package that includes the file. If you feel that SELinux should know about this file and label it correctly please file a bug against SELinux policy.Informations complémentairesContexte source: system_u:system_r:prelink_t:s0Contexte cible: unconfined_u:object_r:etc_t:s0Objets du contexte: None [ file ]Paquetages RPM affectés: prelink-0.4.0-1 [application]Politique RPM: selinux-policy-3.0.8-44.fc8Selinux activé: TrueType de politique: targetedMLS activé: TrueMode strict: EnforcingNom du plugin: plugins.prelink_mislabledNom de l'hôte: localhost.localdomainPlateforme: Linux localhost.localdomain 2.6.23.1-42.fc8 #1 SMP Tue Oct 30 13:55:12 EDT 2007 i686 i686Compteur d'alertes: 1First Seen: mar 04 déc 2007 12:30:16 ESTLast Seen: mar 04 déc 2007 12:30:16 ESTLocal ID: dac6931b-777b-4680-9ab7-6516820bc635Numéros des lignes: Messages d'audit bruts :avc: denied { unlink } for comm=prelink dev=dm-0 egid=0 euid=0 exe=/usr/sbin/prelink exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name=prelink.cache pid=4375 scontext=system_u:system_r:prelink_t:s0 sgid=0 subj=system_u:system_r:prelink_t:s0 suid=0 tclass=file tcontext=unconfined_u:object_r:etc_t:s0 tty=(none) uid=0
Pouvez vous m'aider svp ?
Résumé:
SELinux empêche /usr/sbin/prelink (/usr/sbin/prelink) d'"unlink" à (etc_t).
Description détaillée:
SELinux denied prelink unlink on . The prelink program is only allowed to manipulate files that are identified as executables or shared libraries by SELinux. Libraries that get placed in lib directories get labeled by default as a shared library. Similarly, executables that get placed in a bin or sbin directory get labeled as executables by SELinux. However, if these files get installed in other directories they might not get the correct label. If prelink is trying to manipulate a file that is not a binary or share library this may indicate an intrusion attack.Autoriser l'accèsYou can alter the file context by executing "chcon -t bin_t " or "chcon -t lib_t " if it is a shared library. If you want to make these changes permanent you must execute the semanage command. "semanage fcontext -a -t bin_t " or "semanage fcontext -a -t shlib_t ". If you feel this executable/shared library is in the wrong location please file a bug against the package that includes the file. If you feel that SELinux should know about this file and label it correctly please file a bug against SELinux policy.Informations complémentairesContexte source: system_u:system_r:prelink_t:s0Contexte cible: unconfined_u:object_r:etc_t:s0Objets du contexte: None [ file ]Paquetages RPM affectés: prelink-0.4.0-1 [application]Politique RPM: selinux-policy-3.0.8-44.fc8Selinux activé: TrueType de politique: targetedMLS activé: TrueMode strict: EnforcingNom du plugin: plugins.prelink_mislabledNom de l'hôte: localhost.localdomainPlateforme: Linux localhost.localdomain 2.6.23.1-42.fc8 #1 SMP Tue Oct 30 13:55:12 EDT 2007 i686 i686Compteur d'alertes: 1First Seen: mar 04 déc 2007 12:30:16 ESTLast Seen: mar 04 déc 2007 12:30:16 ESTLocal ID: dac6931b-777b-4680-9ab7-6516820bc635Numéros des lignes: Messages d'audit bruts :avc: denied { unlink } for comm=prelink dev=dm-0 egid=0 euid=0 exe=/usr/sbin/prelink exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name=prelink.cache pid=4375 scontext=system_u:system_r:prelink_t:s0 sgid=0 subj=system_u:system_r:prelink_t:s0 suid=0 tclass=file tcontext=unconfined_u:object_r:etc_t:s0 tty=(none) uid=0
Pouvez vous m'aider svp ?