Re: [gentoo-hardened] portage proc problem?

[Mivz]

I do not run the experimental release.
But that's probably the problem, you should try the latest stable 
release. If that one does install correct, you could file a bug on the 
experimental release. But whit more info then this post has... I would 
keep that in mind, guessing costs a lot of time.

Netopyr wrote:

> It's really weird all this, as far I can see the dmesg result's don't
> have anything to do with the the error messages I got.

Sins your error's start at setfscreatecon, a SELinux specific function, 
the problem probably lies whit selinux or it's policy.
dmesg reports access blocks by selinux, your udev won't build because of 
it's access is blocked. So if the selinux policy blocks your ebuild, it 
would be there. That's why.

> I am absolutely in the role of sysadm_r
>
> id = uid=0(root) gid=0(root)
> groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),11(floppy),20(dialout),26(tape),27(video),35(games)
> context=root:sysadm_r:sysadm_t
>
> The first time I saw these dmesg error's but whatever I install after
> it I never saw it again, it just didn't gave me any information then
> the error messages I supplied.
> is there any way to so I can give you guy's more info to solve my
> problem...
> I did a relabel of my filesystem already without any success.
> probably I have to mention I am using the ~x86 arch so maybe there is
> a problem there.
>
>
>
> On Sun, 2006-02-05 at 15:12 +0100, Mivz wrote:
>
>>Netopyr wrote:
>>
>>> I am upgrading as sysadm_r indeed in permissive mode.
>>> my dmesg gives me the following output.
>>>
>>> audit(1138995159.751:9524): avc:  denied  { create } for  pid=11198
>>> comm="mknod" name="null" scontext=root:sysadm_r:portage_t
>>> tcontext=root:object_r:portage_tmp_t tclass=chr_file
>>> audit(1138995159.755:9525): avc:  denied  { getattr } for  pid=11199
>>> comm="chmod" name="null" dev=hda3 ino=6427517
>>> scontext=root:sysadm_r:portage_t tcontext=root:object_r:portage_tmp_t
>>> tclass=chr_file
>>> audit(1138995159.755:9526): avc:  denied  { setattr } for  pid=11199
>>> comm="chmod" name="null" dev=hda3 ino=6427517
>>> scontext=root:sysadm_r:portage_t tcontext=root:object_r:portage_tmp_t
>>> tclass=chr_file
>>> audit(1138995159.763:9527): avc:  denied  { write } for  pid=11200
>>> comm="touch" name="null" dev=hda3 ino=6427517
>>> scontext=root:sysadm_r:portage_t tcontext=root:object_r:portage_tmp_t
>>> tclass=chr_file
>>> audit(1138995159.827:9528): avc:  denied  { mknod } for  pid=11210
>>> comm="udevd" capability=27 scontext=root:staff_r:staff_t
>>> tcontext=root:staff_r:staff_t tclass=capability
>>>
>>> but what do you mean by "Do you have the portage_t enabeld?" if I need
>>> it how can I enable it.
>>> Coudn't find anything about it in the docs..
>>
>>
>>You don't need it. It's a role you can enable in tunables, wich enabels
>>you to emerge as portage_r instead of sysadm_r.
>>
>>But the last line in your dmesg says root:staff_r:staff_t, sure your in
>>sysadm_r?
>>It is a access problem, so something is blocking.
>>Mabey you need to relabel you filesystem.
>>
>>>
>>> regards Netopyr
>>>
>>>
>>> On Wed, 2006-02-01 at 17:18 +0100, Mivz wrote:
>>>
>>>>Netopyr wrote:
>>>>
>>>>> Hello,I am running a selinux enabled kernel already for a long time
>>>>> withoud problems but since my last -uD world I got problems installing
>>>>> anything.
>>>>> my SElinux won;t allow me to install any program anymore since it got
>>>>> access violations on my proc filesystem (at least I think).
>>>>> The output at the end of this message will give you more information.
>>>>> can someone help me out please?
>>>>>
>>>>> Kind regards,
>>>>>
>>>>> Netopyr
>>>>>
>>>>> -- Example updating udev ---
>>>>> >>> Source compiled.
>>>>> >>> Test phase [not enabled]: sys-fs/udev-081-r1
>>>>>
>>>>> >>> Install udev-081-r1 into /var/tmp/portage/udev-081-r1/image/
>>>>> category sys-fsACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_ebuild_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> ACCESS DENIED  open_wr:   /proc/self/attr/fscreate
>>>>> install: cannot set setfscreatecon `root:object_r:portage_tmp_t':
>>>>> Permission denied
>>>>> man:
>>>>> prepallstrip:
>>>>> strip: i686-pc-linux-gnu-strip --strip-unneeded
>>>>>    /usr/bin/udevinfo
>>>>>    /usr/bin/udevtest
>>>>>    /usr/bin/udevmonitor
>>>>>    /sbin/udev
>>>>>    /sbin/udevd
>>>>>    /sbin/udevsend
>>>>>    /sbin/udevstart
>>>>>    /sbin/udevcontrol
>>>>>    /sbin/udev_run_devd
>>>>>    /sbin/udev_run_hotplugd
>>>>>    /sbin/ata_id
>>>>>    /sbin/vol_id
>>>>>    /sbin/scsi_id
>>>>>    /sbin/usb_id
>>>>>    /sbin/cdrom_id
>>>>>    /sbin/create_floppy_devices
>>>>>    /sbin/firmware_helper
>>>>> >>> Completed installing udev-081-r1 into
>>>>> /var/tmp/portage/udev-081-r1/image/
>>>>>
>>>>> --------------------------- ACCESS VIOLATION SUMMARY
>>>>> ---------------------------LOG FILE =
>>>>> "/var/log/sandbox/sandbox-sys-fs_-_udev-081-r1-23054.log"
>>>>>
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23080/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23082/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23084/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23087/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23089/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23091/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23093/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23095/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23097/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23099/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23101/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23103/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23105/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23107/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23109/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23111/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23113/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23115/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23118/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23124/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23130/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23135/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23137/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23146/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23151/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23155/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23159/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23163/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23167/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23171/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23175/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23180/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23185/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23190/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23195/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23200/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23205/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23212/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23214/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23217/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23219/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23221/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23223/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23225/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23228/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23230/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23233/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23235/attr/fscreate)
>>>>> open_wr:   /proc/self/attr/fscreate (symlink to /proc/23241/attr/fscreate)
>>>>> --------------------------------------------------------------------------------
>>>>
>>>>
>>>>Did you do this as root in sysadm_r?
>>>>Do you have the portage_t enabeld?
>>>>What does dmesg gives as output on the denies?
>>>>Tryed upgrading in permissive mode?
>>>>
>>>>
>>>>
>>
>>
>>

-- 
gentoo-hardened@g.o mailing list