FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora SELinux Support

 
 
LinkBack Thread Tools
 
Old 02-02-2008, 05:43 PM
"Tom London"
 
Default more AVCs from shutdown....

Shutdown from gnome menu still doesn't work for me and generates an AVC:

type=AVC msg=audit(1201976243.041:34): avc: denied { search } for
pid=2470 comm="console-kit-dae" name="PolicyKit-public" dev=dm-0
ino=67632 scontext=system_u:system_r:consolekit_t:s0
tcontext=system_ubject_rolkit_var_lib_t:s0 tclass=dir
type=SYSCALL msg=audit(1201976243.041:34): arch=40000003 syscall=5
success=no exit=-13 a0=9c28880 a1=8000 a2=0 a3=8000 items=0 ppid=1
pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
sgid=0 fsgid=0 tty=(none) comm="console-kit-dae"
exe="/usr/sbin/console-kit-daemon"
subj=system_u:system_r:consolekit_t:s0 key=(null)

and
[root@localhost ~]# locate PolicyKit-public
/var/lib/PolicyKit-public
[root@localhost ~]#

Setting to permissive mode and retrying, shutdown works, but generates
more AVC (attached):


#============= consolekit_t ==============
allow consolekit_t init_exec_t:file { read execute execute_no_trans };
allow consolekit_t initctl_t:fifo_file write;
allow consolekit_t initrc_var_run_t:file { read write lock };
allow consolekit_t lib_t:file execute_no_trans;
allow consolekit_t polkit_var_lib_t:dir search;
allow consolekit_t shell_exec_t:file { read execute };

#============= vmware_host_t ==============
allow vmware_host_t var_run_t:sock_file unlink;

[vmware AVC seems not to bother anything, btw. dontaudit?]

--
Tom London

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
 
Old 02-02-2008, 07:28 PM
"Tom London"
 
Default more AVCs from shutdown....

On Sat, Feb 2, 2008 at 10:43 AM, Tom London <selinux@gmail.com> wrote:
> Shutdown from gnome menu still doesn't work for me and generates an AVC:
>
> type=AVC msg=audit(1201976243.041:34): avc: denied { search } for
> pid=2470 comm="console-kit-dae" name="PolicyKit-public" dev=dm-0
> ino=67632 scontext=system_u:system_r:consolekit_t:s0
> tcontext=system_ubject_rolkit_var_lib_t:s0 tclass=dir
> type=SYSCALL msg=audit(1201976243.041:34): arch=40000003 syscall=5
> success=no exit=-13 a0=9c28880 a1=8000 a2=0 a3=8000 items=0 ppid=1
> pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
> sgid=0 fsgid=0 tty=(none) comm="console-kit-dae"
> exe="/usr/sbin/console-kit-daemon"
> subj=system_u:system_r:consolekit_t:s0 key=(null)
>
> and
> [root@localhost ~]# locate PolicyKit-public
> /var/lib/PolicyKit-public
> [root@localhost ~]#
>
> Setting to permissive mode and retrying, shutdown works, but generates
> more AVC (attached):
>
>
> #============= consolekit_t ==============
> allow consolekit_t init_exec_t:file { read execute execute_no_trans };
> allow consolekit_t initctl_t:fifo_file write;
> allow consolekit_t initrc_var_run_t:file { read write lock };
> allow consolekit_t lib_t:file execute_no_trans;
> allow consolekit_t polkit_var_lib_t:dir search;
> allow consolekit_t shell_exec_t:file { read execute };
>
> #============= vmware_host_t ==============
> allow vmware_host_t var_run_t:sock_file unlink;
>
> [vmware AVC seems not to bother anything, btw. dontaudit?]
>
> --
Ooops, forgot to attach AVCs....

tom
--
Tom London
--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
 

Thread Tools




All times are GMT. The time now is 10:44 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org