Re: [gentoo-hardened] portage proc problem?

Sun, 05 Feb 2006 06:15:37 -0800 

Netopyr wrote:


I am upgrading as sysadm_r indeed in permissive mode.
my dmesg gives me the following output.
audit(1138995159.751:9524): avc: denied { create } for pid=11198 comm="mknod" name="null" scontext=root:sysadm_r:portage_t tcontext=root:object_r:portage_tmp_t tclass=chr_file audit(1138995159.755:9525): avc: denied { getattr } for pid=11199 comm="chmod" name="null" dev=hda3 ino=6427517 scontext=root:sysadm_r:portage_t tcontext=root:object_r:portage_tmp_t tclass=chr_file audit(1138995159.755:9526): avc: denied { setattr } for pid=11199 comm="chmod" name="null" dev=hda3 ino=6427517 scontext=root:sysadm_r:portage_t tcontext=root:object_r:portage_tmp_t tclass=chr_file audit(1138995159.763:9527): avc: denied { write } for pid=11200 comm="touch" name="null" dev=hda3 ino=6427517 scontext=root:sysadm_r:portage_t tcontext=root:object_r:portage_tmp_t tclass=chr_file audit(1138995159.827:9528): avc: denied { mknod } for pid=11210 comm="udevd" capability=27 scontext=root:staff_r:staff_t tcontext=root:staff_r:staff_t tclass=capability
but what do you mean by "Do you have the portage_t enabeld?" if I need it how can I enable it. 
Coudn't find anything about it in the docs..
You don't need it. It's a role you can enable in tunables, wich enabels you to emerge as portage_r instead of sysadm_r.
But the last line in your dmesg says root:staff_r:staff_t, sure your in sysadm_r? 
It is a access problem, so something is blocking.
Mabey you need to relabel you filesystem.



regards Netopyr


On Wed, 2006-02-01 at 17:18 +0100, Mivz wrote:


Netopyr wrote:
Hello,I am running a selinux enabled kernel already for a long time withoud problems but since my last -uD world I got problems installing anything. my SElinux won;t allow me to install any program anymore since it got access violations on my proc filesystem (at least I think). 
The output at the end of this message will give you more information.
can someone help me out please?

Kind regards,

Netopyr

-- Example updating udev ---
>>> Source compiled.
>>> Test phase [not enabled]: sys-fs/udev-081-r1
>>> Install udev-081-r1 into /var/tmp/portage/udev-081-r1/image/ category sys-fsACCESS DENIED open_wr: /proc/self/attr/fscreate install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_ebuild_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
install: cannot set setfscreatecon `root:object_r:portage_tmp_t': Permission denied 
man:
prepallstrip:
strip: i686-pc-linux-gnu-strip --strip-unneeded
   /usr/bin/udevinfo
   /usr/bin/udevtest
   /usr/bin/udevmonitor
   /sbin/udev
   /sbin/udevd
   /sbin/udevsend
   /sbin/udevstart
   /sbin/udevcontrol
   /sbin/udev_run_devd
   /sbin/udev_run_hotplugd
   /sbin/ata_id
   /sbin/vol_id
   /sbin/scsi_id
   /sbin/usb_id
   /sbin/cdrom_id
   /sbin/create_floppy_devices
   /sbin/firmware_helper
>>> Completed installing udev-081-r1 into /var/tmp/portage/udev-081-r1/image/
--------------------------- ACCESS VIOLATION SUMMARY ---------------------------LOG FILE = "/var/log/sandbox/sandbox-sys-fs_-_udev-081-r1-23054.log" 

open_wr:   /proc/self/attr/fscreate (symlink to /proc/23080/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23082/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23084/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23087/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23089/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23091/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23093/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23095/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23097/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23099/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23101/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23103/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23105/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23107/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23109/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23111/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23113/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23115/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23118/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23124/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23130/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23135/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23137/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23146/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23151/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23155/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23159/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23163/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23167/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23171/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23175/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23180/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23185/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23190/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23195/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23200/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23205/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23212/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23214/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23217/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23219/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23221/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23223/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23225/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23228/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23230/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23233/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23235/attr/fscreate)
open_wr:   /proc/self/attr/fscreate (symlink to /proc/23241/attr/fscreate)
-------------------------------------------------------------------------------- 


Did you do this as root in sysadm_r?
Do you have the portage_t enabeld?
What does dmesg gives as output on the denies?
Tryed upgrading in permissive mode?



--
[email protected] mailing list

Reply via email to