Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

SELinux alert when tmpwatch accesses unknown directory

Hi, for a few weeks I regularly get a SELinux alert:

Source Context                system_u:system_r:tmpreaper_t:s0-s0:c0.c1023
Target Context                unconfined_u:object_r:user_home_t:s0
Target Objects                5072C3A473656E746174696F6E [ dir ]
Source                        tmpwatch
Source Path                   /usr/sbin/tmpwatch

I would assume that something is wrong with the target context, but the problem is, I can't find this weird directory!

locate 5072C3A473656E746174696F6E

Turns up nothing, and

find /tmp/ -type d -name 5072C3A473656E746174696F6E
find /var/tmp/ -type d -name 5072C3A473656E746174696F6E

don't either.

The name is allways the same.

Does anyone have any Idea where this directory could be??