FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora SELinux Support

 
 
LinkBack Thread Tools
 
Old 03-24-2008, 12:50 PM
"Pad Hosmane"
 
Default setroubleshoot exiting on AVC's

Title: setroubleshoot exiting on AVC's






Hi,


** I am on Red Hat enterprise 5. setroubleshoot is exiting and I cannot run sealert. I see below messages in logs. Any help in this regard would be of great help.




Mar 22 11:17:52 myhost setroubleshoot:***** SELinux is preventing /usr/sbin/automount (automount_t) "search" access to /proc/142/cmdline (kernel_t).***** For complete SELinux messages. run sealert -l c7e49db5-9d5f-4ffb-afdc-82708db53ee4


Mar 22 11:17:53 myhost setroubleshoot: 2008-03-22 11:17:52,416 [program.ERROR] Can not handle AVC'S related to dispatcher. exiting setroubleshoot context=system_u:system_r:setroubleshootd_t:s0, AVC scontext=system_u:system_r:setroubleshootd_t:s0


Mar 22 11:17:52 myhost setroubleshoot:***** SELinux is preventing /usr/sbin/automount (automount_t) "search" access to /proc/145/cmdline (kernel_t).***** For complete SELinux messages. run sealert -l 89399382-a3bf-4efd-9bfa-51ebdc28217d


Mar 22 11:17:53 myhost setroubleshoot: 2008-03-22 11:17:52,462 [program.ERROR] Can not handle AVC'S related to dispatcher. exiting setroubleshoot context=system_u:system_r:setroubleshootd_t:s0, AVC scontext=system_u:system_r:setroubleshootd_t:s0


Mar 22 11:17:53 myhost setroubleshoot: 2008-03-22 11:17:52,475 [program.ERROR] Can not handle AVC'S related to dispatcher. exiting setroubleshoot context=system_u:system_r:setroubleshootd_t:s0, AVC scontext=system_u:system_r:setroubleshootd_t:s0


Mar 22 11:17:52 myhost* :***** SELinux is preventing /usr/sbin/automount (automount_t) "search" access to /proc/25/cmdline (kernel_t).***** For complete SELinux messages. run sealert -l 4db5f9d7-949a-4fb6-b7eb-3a3762d35684


Mar 22 11:17:52 myhost audispd: Socket error (32, 'Broken pipe')


Mar 22 11:18:08 myhost gpm[3069]: *** info [startup.c(95)]:


Mar 22 11:18:08 myhost gpm[3069]: Started gpm successfully. Entered daemon mode.


Mar 22 11:18:11 myhost rhnsd[3154]: Red Hat Network Services Daemon starting up.


Mar 22 12:18:29 myhost dbus: Can't send to audit system: USER_AVC avc:* received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)


Mar 22 12:18:30 myhost setsebool: The httpd_enable_homedirs policy boolean was changed to true by root


Mar 22 12:19:23 myhost auditd[2494]: dispatch err (pipe full) event lost


Mar 22 12:22:20 myhost dbus: Can't send to audit system: USER_AVC avc:* received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)


Mar 22 12:22:21 myhost setsebool: The use_nfs_home_dirs policy boolean was changed to 1 by root








Thanks in advance.






--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
 
Old 03-24-2008, 03:05 PM
John Dennis
 
Default setroubleshoot exiting on AVC's

Pad Hosmane wrote:

Hi,

I am on Red Hat enterprise 5. setroubleshoot is exiting and I cannot
run sealert. I see below messages in logs. Any help in this regard would
be of great help.


These types of errors are usually indicative of a mislabeled filesystem.
Try relabeling and see if the problems resolve themselves. To relabel:


touch /.autorelabel; reboot

--
John Dennis <jdennis@redhat.com>

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
 
Old 03-24-2008, 03:13 PM
"Pad Hosmane"
 
Default setroubleshoot exiting on AVC's

> run sealert. I see below messages in logs. Any help in this regard
would
> be of great help.

These types of errors are usually indicative of a mislabeled filesystem.

Try relabeling and see if the problems resolve themselves. To relabel:

touch /.autorelabel; reboot

--
John Dennis <jdennis@redhat.com>


Hi John,
Thank you for the reply. I have already relabeled two times with
"touch /.autorelabel"; reboot".

Thanks.


--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
 

Thread Tools




All times are GMT. The time now is 11:33 PM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org