SELinux Security Alert Help

[rumpletumbler]

I've searched and cannot find a reference to this exact message and am unable to match it to a bug report.

Can anyone point me in the right direction please?

SELinux is preventing /bin/find "getattr" access to /var/lib/misc/prelink.full.

Detailed Description:

[find has a permissive type (prelink_cron_system_t). This access was not
denied.]

SELinux denied access requested by find. /var/lib/misc/prelink.full may be a
mislabeled. /var/lib/misc/prelink.full default SELinux type is prelink_var_lib_t,
but its current type is cron_var_lib_t. Changing this file back to the default
type, may fix your problem.

I also got pretty much the same message but with

Summary:

SELinux is preventing /bin/bash "write" access to /var/lib/misc/prelink.quick.

Detailed Description:

[prelink has a permissive type (prelink_cron_system_t). This access was not
denied.]

SELinux denied access requested by prelink. /var/lib/misc/prelink.quick may be a
mislabeled. /var/lib/misc/prelink.quick default SELinux type is
prelink_var_lib_t, but its current type is cron_var_lib_t. Changing this file
back to the default type, may fix your problem.

---------- Post added at 10:37 AM CST ---------- Previous post was at 09:22 AM CST ----------

Actually this looks like it.

https://bugzilla.redhat.com/show_bug.cgi?id=543437

It says this is the fix.

Fixed in selinux-policy-3.6.32-52.fc12.noarch
yum update selinux-policy-targeted --enablerepo=updatest-testing

This I'm "assuming" wouldn't be targeted by a normal software update?

I'm again "assuming" that it wouldn't be necessary to enable the updatest-testing repo unless this were bothersome and just wait on a regular selinux-policy update?

[CSchwangler]

I had the same message once 2 days ago, but every application worked as expected, so I didn't put any effort in it. Then there were some software updates (kernel, etc.) and, if I rember correctly, also some updates for selinux. I haven't seen the message since then.

[Hobashira]

Had the same message this morning for no reason that I could think of and didn't do anything specific.

Haven't seen this error message since then.

[domg472]

This is probably fixed in:

Fixed in selinux-policy-3.6.32-52.fc12.noarch
yum update selinux-policy-targeted --enablerepo=updatest-testing

This will not break anything. It is just a notification:

[find has a permissive type (prelink_cron_system_t). This access was not
denied.]

The policy for prelink is in a testing state. Meaning SELinux logs policy violations as if access was denied. This is done so that Fedora can get feedback that is used to fix any missing policy.

An selinux-policy RPM with the fix will be on the main repository soon.