3

SELinux Security Alert Help

view full story
linux-howto

http://forums.fedoraforum.org – I've searched and cannot find a reference to this exact message and am unable to match it to a bug report. Can anyone point me in the right direction please? SELinux is preventing /bin/find "getattr" access to /var/lib/misc/prelink.full. Detailed Description: [find has a permissive type (prelink_cron_system_t). This access was not denied.] SELinux denied access requested by find. /var/lib/misc/prelink.full may be a mislabeled. /var/lib/misc/prelink.full default SELinux type is prelink_var_lib_t, but its current type is cron_var_lib_t. Changing this file back to the default type, may fix your problem. I also got pretty much the same message but with Summary: SELinux is preventing /bin/bash "write" access to /var/lib/misc/prelink.quick. Detailed Description: [prelink has a permissive type (prelink_cron_system_t). This access was not denied.] SELinux denied access requested by prelink. /var/lib/misc/prelink.quick may be a mislabeled. /var/lib/misc/prelink.quick default SELinux type is prelink_var_lib_t, but its current type is cron_var_lib_t. Changing this file back to the default type, may fix your problem. ---------- Post added at 10:37 AM CST ---------- Previous post was at 09:22 AM CST ---------- Actually this looks like it. https://bugzilla.redhat.com/show_bug.cgi?id=543437 It says this is the fix. Quote: Fixed in selinux-policy-3.6.32-52.fc12.noarch yum update selinux-policy-targeted --enablerepo=updatest-testing This I'm "assuming" wouldn't be targeted by a normal software update? I'm again "assuming" that it wouldn't be necessary to enable the updatest-testing repo unless this were bothersome and just wait on a regular selinux-policy update? (HowTos)