Zen

Source string Source string

596/10000 · 596

The string is read only.

English Actions

SELinux is preventing $SOURCE_PATH the "$ACCESS" capability.

dac_override and dac_read_search capabilities usually indicates that the root process does not have access to a file based on the permission flags. This usually mean you have some file with the wrong ownership/permissions on it.
If you want to help identify if domain needs this access or you have a file with the wrong permissions on your system
turn on full auditing to get path information about the offending file and generate the error again.

Turn on full auditing
# auditctl -w /etc/shadow -p w
Try to recreate AVC. Then execute
# ausearch -m avc -ts recent
If you see PATH record check ownership/permissions on file, and fix it,
otherwise report as a bugzilla.

SELinux is preventing $SOURCE_PATH "$ACCESS" access to device $TARGET_PATH.


SELinux has denied $SOURCE "$ACCESS" access to device $TARGET_PATH.
$TARGET_PATH is mislabeled, this device has the default label of the /dev directory, which should not
happen. All Character and/or Block Devices should have a label.

You can attempt to change the label of the file using

restorecon -v '$TARGET_PATH'.

If this device remains labeled device_t, then this is a bug in SELinux policy.

Please file a bug report.

If you look at the other similar devices labels, ls -lZ /dev/SIMILAR, and find a type that would work for $TARGET_PATH,
you can use chcon -t SIMILAR_TYPE '$TARGET_PATH', If this fixes the problem, you can make this permanent by executing
semanage fcontext -a -t SIMILAR_TYPE '$FIX_TARGET_PATH'

If the restorecon changes the context, this indicates that the application that created the device, created it without
using SELinux APIs. If you can figure out which application created the device, please file a bug report against this application.

Attempt restorecon -v '$TARGET_PATH' or chcon -t SIMILAR_TYPE '$TARGET_PATH'
You need to change the label on $TARGET_PATH to a type of a similar device.
# semanage fcontext -a -t SIMILAR_TYPE '$FIX_TARGET_PATH'
# restorecon -v '$FIX_TARGET_PATH'

Disable IPV6 properly.
If you want to disable IPV6 on this machine
you need to set /proc/sys/net/ipv6/conf/all/disable_ipv6 to 1 and do not blacklist the module'
Add
net.ipv6.conf.all.disable_ipv6 = 1
to /etc/sysctl.conf

SELinux is preventing access to a file labeled unlabeled_t.

SELinux permission checks on files labeled unlabeled_t are being
denied. unlabeled_t is a context the SELinux kernel gives to files
that do not have a label. This indicates a serious labeling
problem. No files on an SELinux box should ever be labeled unlabeled_t.
If you have just added a disk drive to the system, you can
relabel it using the restorecon command. For example if you saved the
home directory from a previous installation that did not use SELinux, 'restorecon -R -v /home' will fix the labels. Otherwise you should
relabel the entire file system.

You can execute the following command as root to relabel your
computer system: "touch /.autorelabel; reboot"
This is caused by a newly created file system.
If you think this is caused by a badly mislabeled machine.
you need to add labels to it.
you need to fully relabel.
Try to fix the label.
Relabel the whole file system. Includes reboot!

SELinux is preventing $SOURCE_PATH from creating a file with a context of $SOURCE_TYPE on a filesystem.

SELinux is preventing $SOURCE from creating a file with a context of $SOURCE_TYPE on a filesystem.
Usually this happens when you ask the cp command to maintain the context of a file when
copying between file systems, "cp -a" for example. Not all file contexts should be maintained
between the file systems. For example, a read-only file type like iso9660_t should not be placed
on a r/w system. "cp -p" might be a better solution, as this will adopt the default file context
for the destination.

Use a command like "cp -p" to preserve all permissions except SELinux context.
If you believe $SOURCE_BASE_PATH should be allowed to create $TARGET_BASE_PATH files
you need to use a different command. You are not allowed to preserve the SELinux context on the target file system.
use a command like "cp -p" to preserve all permissions except SELinux context.

SELinux is preventing the http daemon from sending mail.

SELinux has denied the http daemon from sending mail. An
httpd script is trying to connect to a mail port or execute the
sendmail command. If you did not setup httpd to sendmail, this could
signal an intrusion attempt.

Loading…

User avatar None

String updated in the repository

  1. setroubleshoot
  2. rhel9/plugins
  3. English

SELinux permission checks on files labeled unlabeled_t are being
denied. unlabeled_t is a context the SELinux kernel gives to files
that do not have a label. This indicates a serious labeling
problem. No files on an SELinux box should ever be labeled unlabeled_t.
If you have just added a disk drive to the system, you can
relabel it using the restorecon command. For example if you saved the
home directory from a previous installation that did not use SELinux, 'restorecon -R -v /home' will fix the labels. Otherwise you should
relabel the entire file system.

SELinux permission checks on files labeled unlabeled_t are being
denied. unlabeled_t is a context the SELinux kernel gives to files
that do not have a label. This indicates a serious labeling
problem. No files on an SELinux box should ever be labeled unlabeled_t.
If you have just added a disk drive to the system, you can
relabel it using the restorecon command. For example if you saved the
home directory from a previous installation that did not use SELinux, 'restorecon -R -v /home' will fix the labels. Otherwise you should
relabel the entire file system.
a year ago
Browse all string changes

Things to check

Long untranslated

The string has not been translated for a long time

Reset

Multiple failing checks

Following checks are failing:
Mismatching line breaks: French, Polish, Ukrainian, Chinese (Simplified) (zh_CN)

Reset

Glossary

English English
No related strings found in the glossary.

String information

Flags
read-only
Source string location
../src/file.py:31
String age
a year ago
Last updated
11 months ago
Source string age
a year ago
Translation file
setroubleshoot/plugins/plugins/po/setroubleshoot-plugins.pot, string 101