Description Thomas Nilefalk 2016-09-07 11:10:50 CEST

Installing 5226 on CentOS 7 gave me this error:

SELinux is preventing /usr/bin/python2.7 from unlink access on the file /opt/thinlinc/modules/thinlinc/vsm/lowxmlrpc.pyc.

*****  Plugin catchall_labels (83.8 confidence) suggests   *******************

If you want to allow python2.7 to have unlink access on the lowxmlrpc.pyc file
Then du behöver ändra etiketten på /opt/thinlinc/modules/thinlinc/vsm/lowxmlrpc.pyc
Do
# semanage fcontext -a -t FILTYP '/opt/thinlinc/modules/thinlinc/vsm/lowxmlrpc.pyc'
där FILTYP är en av följande: cupsd_interface_t, cupsd_lock_t, cupsd_log_t, cupsd_rw_etc_t, cupsd_tmp_t, cupsd_var_lib_t, cupsd_var_run_t, krb5_host_rcache_t, print_spool_t. 
Kör sedan: 
restorecon -v '/opt/thinlinc/modules/thinlinc/vsm/lowxmlrpc.pyc'


*****  Plugin catchall (17.1 confidence) suggests   **************************

If du tror att python2.7 borde tillåtas åtkomsten unlink till lowxmlrpc.pyc file som standard.
Then du bör rapportera detta som ett fel.
Du kan generera en lokal policymodul för att tillåta denna åtkomst.
Do
tillåt denna åtkomst för tillfället genom att köra:
# grep python-thinlinc /var/log/audit/audit.log | audit2allow -M minpol
# semodule -i minpol.pp

Additional Information:
Source Context                system_u:system_r:cupsd_t:s0-s0:c0.c1023
Target Context                system_u:object_r:usr_t:s0
Target Objects                /opt/thinlinc/modules/thinlinc/vsm/lowxmlrpc.pyc [
                              file ]
Source                        python-thinlinc
Source Path                   /usr/bin/python2.7
Port                          <Unknown>
Host                          localhost.localdomain
Source RPM Packages           python-2.7.5-34.el7.x86_64
Target RPM Packages           thinlinc-vsm-4.6.0post-5226.x86_64
Policy RPM                    selinux-policy-3.13.1-60.el7_2.7.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     lab-108.lkpg.cendio.se
Platform                      Linux lab-108.lkpg.cendio.se
                              3.10.0-327.28.2.el7.x86_64 #1 SMP Wed Aug 3
                              11:11:39 UTC 2016 x86_64 x86_64
Alert Count                   12
First Seen                    2016-09-07 10:57:43 CEST
Last Seen                     2016-09-07 10:57:50 CEST
Local ID                      053f1a54-db80-466b-a67c-6e4cc2e42c9e

Raw Audit Messages
type=AVC msg=audit(1473238670.711:559): avc:  denied  { unlink } for  pid=7842 comm="python-thinlinc" name="lowxmlrpc.pyc" dev="dm-0" ino=81590975 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file


type=SYSCALL msg=audit(1473238670.711:559): arch=x86_64 syscall=unlink success=no exit=EACCES a0=28328d0 a1=1bbf0 a2=81a4 a3=7fb610ab95f0 items=0 ppid=7826 pid=7842 auid=4294967295 uid=0 gid=7 euid=0 suid=0 fsuid=0 egid=7 sgid=7 fsgid=7 tty=(none) ses=4294967295 comm=python-thinlinc exe=/usr/bin/python2.7 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)

Hash: python-thinlinc,cupsd_t,usr_t,file,unlink