FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora SELinux Support

 
 
LinkBack Thread Tools
 
Old 12-11-2008, 12:15 PM
Antonio Olivares
 
Default new avc's on rawhide

Dear all,

Selinux is denying some unknown things which I have no idea here:

type=1401 audit(1229001124.306:10): security_compute_sid: invalid context unconfined_u:unconfined_r:unconfined_java_t:s0-s0:c0.c1023 for scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_ubject_r:java_exec_t:s0 tclass=process
type=1401 audit(1229001126.375:11): security_compute_sid: invalid context unconfined_u:unconfined_r:unconfined_java_t:s0-s0:c0.c1023 for scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_ubject_r:java_exec_t:s0 tclass=process
type=1401 audit(1229001143.573:12): security_compute_sid: invalid context unconfined_u:unconfined_r:unconfined_java_t:s0-s0:c0.c1023 for scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_ubject_r:java_exec_t:s0 tclass=process

type=1401 audit(1228999637.368:5): security_compute_sid: invalid context unconfined_u:unconfined_r:unconfined_java_t:s0-s0:c0.c1023 for scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_ubject_r:java_exec_t:s0 tclass=process
type=1401 audit(1228999646.221:6): security_compute_sid: invalid context unconfined_u:unconfined_r:unconfined_java_t:s0-s0:c0.c1023 for scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_ubject_r:java_exec_t:s0 tclass=process
npviewer.bin[9213] general protection ip:1132f8c sp:bf86f140 error:0 in libflashplayer.so[dc7000+951000]

Thanks,

Antonio




--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
 
Old 12-11-2008, 01:36 PM
Daniel J Walsh
 
Default new avc's on rawhide

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Antonio Olivares wrote:
> Dear all,
>
> Selinux is denying some unknown things which I have no idea here:
>
> type=1401 audit(1229001124.306:10): security_compute_sid: invalid context unconfined_u:unconfined_r:unconfined_java_t:s0-s0:c0.c1023 for scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_ubject_r:java_exec_t:s0 tclass=process
> type=1401 audit(1229001126.375:11): security_compute_sid: invalid context unconfined_u:unconfined_r:unconfined_java_t:s0-s0:c0.c1023 for scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_ubject_r:java_exec_t:s0 tclass=process
> type=1401 audit(1229001143.573:12): security_compute_sid: invalid context unconfined_u:unconfined_r:unconfined_java_t:s0-s0:c0.c1023 for scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_ubject_r:java_exec_t:s0 tclass=process
>
> type=1401 audit(1228999637.368:5): security_compute_sid: invalid context unconfined_u:unconfined_r:unconfined_java_t:s0-s0:c0.c1023 for scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_ubject_r:java_exec_t:s0 tclass=process
> type=1401 audit(1228999646.221:6): security_compute_sid: invalid context unconfined_u:unconfined_r:unconfined_java_t:s0-s0:c0.c1023 for scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_ubject_r:java_exec_t:s0 tclass=process
> npviewer.bin[9213] general protection ip:1132f8c sp:bf86f140 error:0 in libflashplayer.so[dc7000+951000]
>
> Thanks,
>
> Antonio
>
>
>
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Fixed in selinux-policy-3.6.1-10.fc11

If you want to fix it for now, you need to add the rule

gen_require(`
type unconfined_java_t;
role unconfined_r;
')

role unconfined_r types unconfined_java_t;
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAklBJYgACgkQrlYvE4MpobMQwwCfaintHBXDgp qQAtJB+Tb7OH0K
bgkAnRGysRi6Crk4mKSjqeGIdn40FeoE
=DyUs
-----END PGP SIGNATURE-----

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
 

Thread Tools




All times are GMT. The time now is 09:11 AM.

VBulletin, Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright ©2007 - 2008, www.linux-archive.org