
Summary:

SELinux is preventing gnome-clock-app (gnomeclock_t) "sys_ptrace" to <Unknown>
(gnomeclock_t).

Detailed Description:

SELinux denied access requested by gnome-clock-app. It is not expected that this
access is required by gnome-clock-app and this access may signal an intrusion
attempt. It is also possible that the specific version or configuration of the
application is causing it to require additional access.

Allowing Access:

You can generate a local policy module to allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
SELinux protection altogether. Disabling SELinux protection is not recommended.
Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
against this package.

Additional Information:

Source Context                system_u:system_r:gnomeclock_t:s0-s0:c0.c1023
Target Context                system_u:system_r:gnomeclock_t:s0-s0:c0.c1023
Target Objects                None [ capability ]
Source                        gnome-clock-app
Source Path                   /usr/libexec/gnome-clock-applet-mechanism
Port                          <Unknown>
Host                          taplop
Source RPM Packages           gnome-panel-2.22.1.2-1.fc9
Target RPM Packages           
Policy RPM                    selinux-policy-3.3.1-33.fc9
Selinux Enabled               True
Policy Type                   targeted
MLS Enabled                   True
Enforcing Mode                Enforcing
Plugin Name                   catchall
Host Name                     taplop
Platform                      Linux taplop 2.6.25-0.218.rc8.git7.fc9.i686 #1 SMP
                              Wed Apr 9 20:35:56 EDT 2008 i686 i686
Alert Count                   15
First Seen                    Fri 11 Apr 2008 05:13:36 PM EDT
Last Seen                     Tue 15 Apr 2008 12:04:21 PM EDT
Local ID                      55e5fd31-feb2-4c9b-b35c-011453ddb15f
Line Numbers                  

Raw Audit Messages            

host=taplop type=AVC msg=audit(1208275461.203:948): avc:  denied  { sys_ptrace } for  pid=20172 comm="gnome-clock-app" capability=19 scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tcontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tclass=capability

host=taplop type=SYSCALL msg=audit(1208275461.203:948): arch=40000003 syscall=85 success=no exit=-13 a0=bfee6368 a1=bfee6448 a2=fff a3=bfee6368 items=0 ppid=1 pid=20172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="gnome-clock-app" exe="/usr/libexec/gnome-clock-applet-mechanism" subj=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 key=(null)
