Search My Blog

Tuesday, February 16, 2010

Fedora Project, sponsored by Red Hat


Summary:

SELinux is preventing /usr/sbin/vsftpd "net_raw" access .

Detailed Description:

SELinux denied access requested by vsftpd. It is not expected that this access
is required by vsftpd and this access may signal an intrusion attempt. It is
also possible that the specific version or configuration of the application is
causing it to require additional access.

Allowing Access:

You can generate a local policy module to allow this access - see FAQ
(http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug
report.

Additional Information:

Source Context                unconfined_u:system_r:ftpd_t:s0-s0:c0.c1023
Target Context                unconfined_u:system_r:ftpd_t:s0-s0:c0.c1023
Target Objects                None [ capability ]
Source                        vsftpd
Source Path                   /usr/sbin/vsftpd
Port                          <Unknown>
Host                          gatewaygt5408.localdomain
Source RPM Packages           vsftpd-2.2.2-1.fc12
Target RPM Packages          
Policy RPM                    selinux-policy-3.6.32-89.fc12
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Plugin Name                   catchall
Host Name                     gatewaygt5408.localdomain
Platform                      Linux gatewaygt5408.localdomain
                              2.6.32.7-37.fc12.i686 #1 SMP Fri Jan 29 14:54:27
                              UTC 2010 i686 i686
Alert Count                   7
First Seen                    Sun 14 Feb 2010 11:13:26 PM CST
Last Seen                     Sun 14 Feb 2010 11:47:43 PM CST
Local ID                      dd9e2803-d262-4cb8-aa53-f3b2cef15443
Line Numbers                 

Raw Audit Messages           

node=gatewaygt5408.localdomain type=AVC msg=audit(1266212863.8:40113): avc:  denied  { net_raw } for  pid=10186 comm="vsftpd" capability=13  scontext=unconfined_u:system_r:ftpd_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:ftpd_t:s0-s0:c0.c1023 tclass=capability

node=gatewaygt5408.localdomain type=SYSCALL msg=audit(1266212863.8:40113): arch=40000003 syscall=120 success=no exit=-1 a0=40000011 a1=0 a2=eb133c a3=eb133c items=0 ppid=0 pid=10186 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="vsftpd" exe="/usr/sbin/vsftpd" subj=unconfined_u:system_r:ftpd_t:s0-s0:c0.c1023 key=(null)


Allowing Access:

You can generate a local policy module to allow this access - see FAQ

http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385
--
Don's e-mail sig DonSongs links

God Bless,

Don


Check out my Web Pages and Blog’s too...


Don's Music and Poems at
DonSongs.com

DonSongs! Download Both Albums in MP3's Free! Also, there's Pages of my Songs, Poems and Pic’s of me and friends:>) www.DonSongs.com

DonSongs New Site With Music Players for Both Albums and New Page Design...



Download The Whole Living Beings - Climate Control Album Free!:) We have our New Album Out Now! With me, Don Bishop doing Vocals and Lyrics and Marty Splawn Playing all the Music! And You can Download the whole Album Free!

http://bishopco.com/LivingBeings/LivingBeings-ClimateControl-mp3.html



And here’s an alternative Living Beings download site that also has smaller 64Kbps M3U versions for Dialup connections and it has Streams of the complete album too if you just want to listen online without saving the MP3’s. http://www.archive.org/details/DonBishopLivingBeingsClimateControl



Living Beings Blog has some MP3 Song clips from our Living Beings - Climate Control album. Also, I put up some of my favorite Pic’s. http://livingbeings.blogspirit.com/



And here’s an alternative DonSongs download site that also has smaller 64Kbps M3U versions for Dialup connections and it has Streams of the complete album too if you just want to listen online without saving the MP3’s. http://www.archive.org/details/DonBishopDonSongs002



CMU - Christian Music Underground

CMU was started by Don Bishop to share the music of myself and of course the rest of you guys who are among the non commercial artists out there who work hard at their music and want to Glorify, Praise and Share the Love of our Lord Jesus.

http://christianrocker.com/index.php?mode=player&type=radio&id=79



DonSongs Blog... This is a Collection of Songs written & Sung by Don Bishop from 01-1991 to 03-2002.http://donsongs.blogspirit.com/

I need help starting a ministry for Kids. Do you love Kids and Teenagers? If you feel a calling on your life to help the least of these grow up and learn to live and love and believe in Jesus, then please check out our vision.

Psalms 68 Ministries http://www.Psalms68.com



My Web Site’s Business Page, the Entry Point for all the rest. My New Site is at http://bishopco.com/mambo/ and my old faithful is at http://www.BishopCo.com



Classified Ads, Place Your’s for Free Here! Try out my free Classified Ads Site.

Don's Deals Free Classifieds http://epage.com/js/csp/c44364/b44364/r571658/?csp=44364


No comments: