FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora User

 
 
LinkBack Thread Tools
 
Old 05-08-2012, 03:06 AM
Ed Greshko
 
Default X Hang when starting machine

On 05/08/2012 08:39 AM, Antonio Olivares wrote:
> Dear folks,
>
> For the past week or so, I have a machine running Fedora 16 and X worked fine till a week or so ago. I have started in level 3 and relabeled everything(in case Selinux has a problem), but machine still hangs when starting up. I start in level 3 and type startx and I get Fallback mode (Gnome 3). If I start in gui mode I get a hang and cannot get to X. Sometimes I am lucky to get X. However booting with enforcing=0, X comes up with no problem.
>
> I have relabeled filesystem two times already and this continues to happen.
>
> Smolt Profile in case it is important
>
> http://www.smolts.org/client/show/pub_6f209009-0c1d-4fe8-94e9-9dda0d19ac44

Error 503 Service Unavailable

>
> I welcome ideas suggestions and comments. I am hitting this bug on a daily basis as my students use this machine for school work and it is not working well. My students are upset at me, because I have to add the extra enforcing=0, when things should just work.
>

You don't say what video hardware or drivers are in use?

Have you tried "startkde" instead of "startx" from runlevel 3?

You said you saw another thread about selinux and X....but you didn't point to it.
Another pair if eyes reading the same things can be helpful.


--
Never be afraid to laugh at yourself, after all, you could be missing out on the joke
of the century. -- Dame Edna Everage
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 05-08-2012, 12:15 PM
Daniel J Walsh
 
Default X Hang when starting machine

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/07/2012 11:06 PM, Ed Greshko wrote:
> On 05/08/2012 08:39 AM, Antonio Olivares wrote:
>> Dear folks,
>>
>> For the past week or so, I have a machine running Fedora 16 and X worked
>> fine till a week or so ago. I have started in level 3 and relabeled
>> everything(in case Selinux has a problem), but machine still hangs when
>> starting up. I start in level 3 and type startx and I get Fallback mode
>> (Gnome 3). If I start in gui mode I get a hang and cannot get to X.
>> Sometimes I am lucky to get X. However booting with enforcing=0, X comes
>> up with no problem.
>>
>> I have relabeled filesystem two times already and this continues to
>> happen.
>>
>> Smolt Profile in case it is important
>>
>> http://www.smolts.org/client/show/pub_6f209009-0c1d-4fe8-94e9-9dda0d19ac44
>
>>
> Error 503 Service Unavailable
>
>>
>> I welcome ideas suggestions and comments. I am hitting this bug on a
>> daily basis as my students use this machine for school work and it is not
>> working well. My students are upset at me, because I have to add the
>> extra enforcing=0, when things should just work.
>>
>
> You don't say what video hardware or drivers are in use?
>
> Have you tried "startkde" instead of "startx" from runlevel 3?
>
> You said you saw another thread about selinux and X....but you didn't point
> to it. Another pair if eyes reading the same things can be helpful.
>
>
Could you attach a compressed "ausearch -i -m avc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk+pDnUACgkQrlYvE4MpobO55gCg6guyVAGpyR HHE6mt+KC9nq3I
fp0An1oQ3mbowSm15n40WGD2LJAjquQd
=+CG7
-----END PGP SIGNATURE-----
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 05-08-2012, 02:00 PM
Antonio Olivares
 
Default X Hang when starting machine

--- On Tue, 5/8/12, Daniel J Walsh <dwalsh@redhat.com> wrote:

> From: Daniel J Walsh <dwalsh@redhat.com>
> Subject: Re: X Hang when starting machine
> To: "Community support for Fedora users" <users@lists.fedoraproject.org>
> Date: Tuesday, May 8, 2012, 5:15 AM
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 05/07/2012 11:06 PM, Ed Greshko wrote:
> > On 05/08/2012 08:39 AM, Antonio Olivares wrote:
> >> Dear folks,
> >>
> >> For the past week or so, I have a machine running
> Fedora 16 and X worked
> >> fine till a week or so ago.* I have started in
> level 3 and relabeled
> >> everything(in case Selinux has a problem), but
> machine still hangs when
> >> starting up.* I start in level 3 and type
> startx and I get Fallback mode
> >> (Gnome 3).* If I start in gui mode I get a
> hang and cannot get to X.
> >> Sometimes I am lucky to get X.* However
> booting with enforcing=0, X comes
> >> up with no problem.
> >>
> >> I have relabeled filesystem two times already and
> this continues to
> >> happen.
> >>
> >> Smolt Profile in case it is important
> >>
> >> http://www.smolts.org/client/show/pub_6f209009-0c1d-4fe8-94e9-9dda0d19ac44
> >
> >>
> > Error 503 Service Unavailable
> >
> >>
> >> I welcome ideas suggestions and comments.* I
> am hitting this bug on a
> >> daily basis as my students use this machine for
> school work and it is not
> >> working well.* My students are upset at me,
> because I have to add the
> >> extra enforcing=0, when things should just work.
> >>
> >
> > You don't say what video hardware or drivers are in
> use?
> >
> > Have you tried "startkde" instead of "startx" from
> runlevel 3?
> >
> > You said you saw another thread about selinux and
> X....but you didn't point
> > to it. Another pair if eyes reading the same things can
> be helpful.
> >
> >
> Could you attach a compressed "ausearch -i -m avc"

I have updated another machine and run into the same problem
Starting in enforcing=0 works

Here is the output of above command

[antonio@localhost ~]$ su -
Password:
[root@localhost ~]# ausearch -i -m avc
----
type=SYSCALL msg=audit(10/05/2011 10:41:15.287:109) : arch=i386 syscall=lsetxattr success=no exit=-22(Invalid argument) a0=0xe77af68 a1=0x66f5d2 a2=0xe779d58 a3=0x24 items=0 ppid=1940 pid=1947 auid=antonio uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 ses=2 comm=yum exe=/usr/bin/python subj=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(10/05/2011 10:41:15.287:109) : avc: denied { mac_admin } for pid=1947 comm=yum capability=mac_admin scontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=capability2
----
type=SYSCALL msg=audit(10/05/2011 10:45:30.811:127) : arch=i386 syscall=unlinkat success=yes exit=0 a0=0xd a1=0xbf8df2cb a2=0x0 a3=0x8422dd0 items=0 ppid=1 pid=5449 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=systemd-logind exe=/lib/systemd/systemd-logind subj=system_u:system_r:systemd_logind_t:s0 key=(null)
type=AVC msg=audit(10/05/2011 10:45:30.811:127) : avc: denied { unlink } for pid=5449 comm=systemd-logind name=user dev=tmpfs ino=21513 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_ubject_r:config_home_t:s0 tclass=file
----
type=SYSCALL msg=audit(10/06/2011 07:30:55.325:63) : arch=i386 syscall=mmap success=no exit=-13(Permission denied) a0=0xbfbb8f38 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1865 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(10/06/2011 07:30:55.325:63) : avc: denied { mmap_zero } for pid=1865 comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:30:56.017:64) : arch=i386 syscall=mmap success=no exit=-13(Permission denied) a0=0xbfb2f918 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1872 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(10/06/2011 07:30:56.017:64) : avc: denied { mmap_zero } for pid=1872 comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:30:56.444:65) : arch=i386 syscall=mmap success=no exit=-13(Permission denied) a0=0xbf832298 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872 pid=1873 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(10/06/2011 07:30:56.444:65) : avc: denied { mmap_zero } for pid=1873 comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:30:56.695:66) : arch=i386 syscall=mmap success=no exit=-13(Permission denied) a0=0xbf8aeff8 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872 pid=1876 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(10/06/2011 07:30:56.695:66) : avc: denied { mmap_zero } for pid=1876 comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:31:00.839:68) : arch=i386 syscall=mmap success=no exit=-13(Permission denied) a0=0xbfac3f28 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1880 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(10/06/2011 07:31:00.839:68) : avc: denied { mmap_zero } for pid=1880 comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:31:00.839:67) : arch=i386 syscall=mmap success=no exit=-13(Permission denied) a0=0xbfed9e88 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1879 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(10/06/2011 07:31:00.839:67) : avc: denied { mmap_zero } for pid=1879 comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:31:10.067:69) : arch=i386 syscall=mmap success=no exit=-13(Permission denied) a0=0xbfe39b38 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876 pid=1892 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(10/06/2011 07:31:10.067:69) : avc: denied { mmap_zero } for pid=1892 comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:31:45.589:74) : arch=i386 syscall=mmap success=no exit=-13(Permission denied) a0=0xbf8ac478 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876 pid=2027 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(10/06/2011 07:31:45.589:74) : avc: denied { mmap_zero } for pid=2027 comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:31:46.811:75) : arch=i386 syscall=mmap success=no exit=-13(Permission denied) a0=0xbfdf4318 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1873 pid=2032 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(10/06/2011 07:31:46.811:75) : avc: denied { mmap_zero } for pid=2032 comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:31:47.648:76) : arch=i386 syscall=mmap success=no exit=-13(Permission denied) a0=0xbf813938 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=2040 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(10/06/2011 07:31:47.648:76) : avc: denied { mmap_zero } for pid=2040 comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(11/29/2011 07:10:52.252:87) : arch=i386 syscall=open success=no exit=-13(Permission denied) a0=0x805db18 a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0 items=0 ppid=1 pid=4108 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=mcelog exe=/usr/sbin/mcelog subj=system_u:system_r:mcelog_t:s0 key=(null)
type=AVC msg=audit(11/29/2011 07:10:52.252:87) : avc: denied { create } for pid=4108 comm=mcelog name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0 tcontext=system_ubject_r:var_run_t:s0 tclass=file
----
type=SYSCALL msg=audit(11/29/2011 00:18:06.277:14) : arch=i386 syscall=open success=no exit=-13(Permission denied) a0=0x805db18 a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0 items=0 ppid=1 pid=894 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=mcelog exe=/usr/sbin/mcelog subj=system_u:system_r:mcelog_t:s0 key=(null)
type=AVC msg=audit(11/29/2011 00:18:06.277:14) : avc: denied { create } for pid=894 comm=mcelog name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0 tcontext=system_ubject_r:var_run_t:s0 tclass=file
----
type=SYSCALL msg=audit(12/06/2011 01:54:44.898:13) : arch=i386 syscall=open success=no exit=-13(Permission denied) a0=0x805db18 a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0 items=0 ppid=1 pid=916 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=mcelog exe=/usr/sbin/mcelog subj=system_u:system_r:mcelog_t:s0 key=(null)
type=AVC msg=audit(12/06/2011 01:54:44.898:13) : avc: denied { create } for pid=916 comm=mcelog name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0 tcontext=system_ubject_r:var_run_t:s0 tclass=file

I will do the same in the other machine and copy it here inline


Thanks,


Antonio
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 05-08-2012, 02:26 PM
Antonio Olivares
 
Default X Hang when starting machine

> Could you attach a compressed "ausearch -i -m avc"
>

Started machine in level 3 and can log in in "Fallback Mode", here's compressed file.

Regards,


Antonio --
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 05-08-2012, 03:36 PM
Daniel J Walsh
 
Default X Hang when starting machine

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/08/2012 10:00 AM, Antonio Olivares wrote:
>
>
> --- On Tue, 5/8/12, Daniel J Walsh <dwalsh@redhat.com> wrote:
>
>> From: Daniel J Walsh <dwalsh@redhat.com> Subject: Re: X Hang when
>> starting machine To: "Community support for Fedora users"
>> <users@lists.fedoraproject.org> Date: Tuesday, May 8, 2012, 5:15 AM
>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>>
>> On 05/07/2012 11:06 PM, Ed Greshko wrote:
>>> On 05/08/2012 08:39 AM, Antonio Olivares wrote:
>>>> Dear folks,
>>>>
>>>> For the past week or so, I have a machine running
>> Fedora 16 and X worked
>>>> fine till a week or so ago. I have started in
>> level 3 and relabeled
>>>> everything(in case Selinux has a problem), but
>> machine still hangs when
>>>> starting up. I start in level 3 and type
>> startx and I get Fallback mode
>>>> (Gnome 3). If I start in gui mode I get a
>> hang and cannot get to X.
>>>> Sometimes I am lucky to get X. However
>> booting with enforcing=0, X comes
>>>> up with no problem.
>>>>
>>>> I have relabeled filesystem two times already and
>> this continues to
>>>> happen.
>>>>
>>>> Smolt Profile in case it is important
>>>>
>>>> http://www.smolts.org/client/show/pub_6f209009-0c1d-4fe8-94e9-9dda0d19ac44
>>>
>>>>
>>>
>>>>
Error 503 Service Unavailable
>>>
>>>>
>>>> I welcome ideas suggestions and comments. I
>> am hitting this bug on a
>>>> daily basis as my students use this machine for
>> school work and it is not
>>>> working well. My students are upset at me,
>> because I have to add the
>>>> extra enforcing=0, when things should just work.
>>>>
>>>
>>> You don't say what video hardware or drivers are in
>> use?
>>>
>>> Have you tried "startkde" instead of "startx" from
>> runlevel 3?
>>>
>>> You said you saw another thread about selinux and
>> X....but you didn't point
>>> to it. Another pair if eyes reading the same things can
>> be helpful.
>>>
>>>
>> Could you attach a compressed "ausearch -i -m avc"
>
> I have updated another machine and run into the same problem Starting in
> enforcing=0 works
>
> Here is the output of above command
>
> [antonio@localhost ~]$ su - Password: [root@localhost ~]# ausearch -i -m
> avc ---- type=SYSCALL msg=audit(10/05/2011 10:41:15.287:109) : arch=i386
> syscall=lsetxattr success=no exit=-22(Invalid argument) a0=0xe77af68
> a1=0x66f5d2 a2=0xe779d58 a3=0x24 items=0 ppid=1940 pid=1947 auid=antonio
> uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root
> fsgid=root tty=pts1 ses=2 comm=yum exe=/usr/bin/python
> subj=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 key=(null) type=AVC
> msg=audit(10/05/2011 10:41:15.287:109) : avc: denied { mac_admin } for
> pid=1947 comm=yum capability=mac_admin
> scontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
> tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=capability2
> ---- type=SYSCALL msg=audit(10/05/2011 10:45:30.811:127) : arch=i386
> syscall=unlinkat success=yes exit=0 a0=0xd a1=0xbf8df2cb a2=0x0
> a3=0x8422dd0 items=0 ppid=1 pid=5449 auid=unset uid=root gid=root euid=root
> suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset
> comm=systemd-logind exe=/lib/systemd/systemd-logind
> subj=system_u:system_r:systemd_logind_t:s0 key=(null) type=AVC
> msg=audit(10/05/2011 10:45:30.811:127) : avc: denied { unlink } for
> pid=5449 comm=systemd-logind name=user dev=tmpfs ino=21513
> scontext=system_u:system_r:systemd_logind_t:s0
> tcontext=system_ubject_r:config_home_t:s0 tclass=file ---- type=SYSCALL
> msg=audit(10/06/2011 07:30:55.325:63) : arch=i386 syscall=mmap success=no
> exit=-13(Permission denied) a0=0xbfbb8f38 a1=0x0 a2=PROT_NONE a3=MAP_FILE
> items=0 ppid=1 pid=1865 auid=antonio uid=antonio gid=antonio euid=antonio
> suid=antonio fsuid=antonio egid=antonio sgid=antonio fsgid=antonio
> tty=(none) ses=2 comm=wine-preloader exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
> msg=audit(10/06/2011 07:30:55.325:63) : avc: denied { mmap_zero } for
> pid=1865 comm=wine-preloader
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011 07:30:56.017:64) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied) a0=0xbfb2f918 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1872 auid=antonio uid=antonio
> gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio
> sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
> exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
> msg=audit(10/06/2011 07:30:56.017:64) : avc: denied { mmap_zero } for
> pid=1872 comm=wine-preloader
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011 07:30:56.444:65) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied) a0=0xbf832298 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872 pid=1873 auid=antonio
> uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
> egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
> comm=wine-preloader exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
> msg=audit(10/06/2011 07:30:56.444:65) : avc: denied { mmap_zero } for
> pid=1873 comm=wine-preloader
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011 07:30:56.695:66) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied) a0=0xbf8aeff8 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872 pid=1876 auid=antonio
> uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
> egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
> comm=wine-preloader exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
> msg=audit(10/06/2011 07:30:56.695:66) : avc: denied { mmap_zero } for
> pid=1876 comm=wine-preloader
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011 07:31:00.839:68) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied) a0=0xbfac3f28 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1880 auid=antonio uid=antonio
> gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio
> sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
> exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
> msg=audit(10/06/2011 07:31:00.839:68) : avc: denied { mmap_zero } for
> pid=1880 comm=wine-preloader
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011 07:31:00.839:67) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied) a0=0xbfed9e88 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1879 auid=antonio uid=antonio
> gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio
> sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
> exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
> msg=audit(10/06/2011 07:31:00.839:67) : avc: denied { mmap_zero } for
> pid=1879 comm=wine-preloader
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011 07:31:10.067:69) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied) a0=0xbfe39b38 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876 pid=1892 auid=antonio
> uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
> egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
> comm=wine-preloader exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
> msg=audit(10/06/2011 07:31:10.067:69) : avc: denied { mmap_zero } for
> pid=1892 comm=wine-preloader
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011 07:31:45.589:74) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied) a0=0xbf8ac478 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876 pid=2027 auid=antonio
> uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
> egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
> comm=wine-preloader exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
> msg=audit(10/06/2011 07:31:45.589:74) : avc: denied { mmap_zero } for
> pid=2027 comm=wine-preloader
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011 07:31:46.811:75) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied) a0=0xbfdf4318 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1873 pid=2032 auid=antonio
> uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
> egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
> comm=wine-preloader exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
> msg=audit(10/06/2011 07:31:46.811:75) : avc: denied { mmap_zero } for
> pid=2032 comm=wine-preloader
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011 07:31:47.648:76) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied) a0=0xbf813938 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=2040 auid=antonio uid=antonio
> gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio
> sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
> exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
> msg=audit(10/06/2011 07:31:47.648:76) : avc: denied { mmap_zero } for
> pid=2040 comm=wine-preloader
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
> ---- type=SYSCALL msg=audit(11/29/2011 07:10:52.252:87) : arch=i386
> syscall=open success=no exit=-13(Permission denied) a0=0x805db18
> a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0 items=0 ppid=1 pid=4108
> auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root
> sgid=root fsgid=root tty=(none) ses=unset comm=mcelog exe=/usr/sbin/mcelog
> subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC msg=audit(11/29/2011
> 07:10:52.252:87) : avc: denied { create } for pid=4108 comm=mcelog
> name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
> tcontext=system_ubject_r:var_run_t:s0 tclass=file ---- type=SYSCALL
> msg=audit(11/29/2011 00:18:06.277:14) : arch=i386 syscall=open success=no
> exit=-13(Permission denied) a0=0x805db18 a1=O_WRONLY|O_CREAT|O_TRUNC
> a2=0x1b6 a3=0x0 items=0 ppid=1 pid=894 auid=unset uid=root gid=root
> euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none)
> ses=unset comm=mcelog exe=/usr/sbin/mcelog
> subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC msg=audit(11/29/2011
> 00:18:06.277:14) : avc: denied { create } for pid=894 comm=mcelog
> name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
> tcontext=system_ubject_r:var_run_t:s0 tclass=file ---- type=SYSCALL
> msg=audit(12/06/2011 01:54:44.898:13) : arch=i386 syscall=open success=no
> exit=-13(Permission denied) a0=0x805db18 a1=O_WRONLY|O_CREAT|O_TRUNC
> a2=0x1b6 a3=0x0 items=0 ppid=1 pid=916 auid=unset uid=root gid=root
> euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none)
> ses=unset comm=mcelog exe=/usr/sbin/mcelog
> subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC msg=audit(12/06/2011
> 01:54:44.898:13) : avc: denied { create } for pid=916 comm=mcelog
> name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
> tcontext=system_ubject_r:var_run_t:s0 tclass=file
>
> I will do the same in the other machine and copy it here inline
>
>
> Thanks,
>
>
> Antonio

rpm -q selinux-policy
selinux-policy-3.10.0-88.fc16

I believe some of these are fixed in the latest policy.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk+pPXsACgkQrlYvE4MpobM1egCgoCvzWyu9yV xwMFsg5UlW3ML7
G2AAoL6g5nmg5xjrsZFIhi0E+a8Aradb
=td5x
-----END PGP SIGNATURE-----
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 05-08-2012, 04:35 PM
Antonio Olivares
 
Default X Hang when starting machine

> >> Could you attach a compressed "ausearch -i -m avc"
> >
> > I have updated another machine and run into the same
> problem Starting in
> > enforcing=0 works
> >
> > Here is the output of above command
> >
> > [antonio@localhost ~]$ su - Password: [root@localhost
> ~]# ausearch -i -m
> > avc ---- type=SYSCALL msg=audit(10/05/2011
> 10:41:15.287:109) : arch=i386
> > syscall=lsetxattr success=no exit=-22(Invalid argument)
> a0=0xe77af68
> > a1=0x66f5d2 a2=0xe779d58 a3=0x24 items=0 ppid=1940
> pid=1947 auid=antonio
> > uid=root gid=root euid=root suid=root fsuid=root
> egid=root sgid=root
> > fsgid=root tty=pts1 ses=2 comm=yum exe=/usr/bin/python
> > subj=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/05/2011 10:41:15.287:109) : avc:*
> denied* { mac_admin } for
> > pid=1947 comm=yum capability=mac_admin
> > scontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
> > tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
> tclass=capability2
> > ---- type=SYSCALL msg=audit(10/05/2011
> 10:45:30.811:127) : arch=i386
> > syscall=unlinkat success=yes exit=0 a0=0xd
> a1=0xbf8df2cb a2=0x0
> > a3=0x8422dd0 items=0 ppid=1 pid=5449 auid=unset
> uid=root gid=root euid=root
> > suid=root fsuid=root egid=root sgid=root fsgid=root
> tty=(none) ses=unset
> > comm=systemd-logind exe=/lib/systemd/systemd-logind
> > subj=system_u:system_r:systemd_logind_t:s0 key=(null)
> type=AVC
> > msg=audit(10/05/2011 10:45:30.811:127) : avc:*
> denied* { unlink } for
> > pid=5449 comm=systemd-logind name=user dev=tmpfs
> ino=21513
> > scontext=system_u:system_r:systemd_logind_t:s0
> > tcontext=system_ubject_r:config_home_t:s0 tclass=file
> ---- type=SYSCALL
> > msg=audit(10/06/2011 07:30:55.325:63) : arch=i386
> syscall=mmap success=no
> > exit=-13(Permission denied) a0=0xbfbb8f38 a1=0x0
> a2=PROT_NONE a3=MAP_FILE
> > items=0 ppid=1 pid=1865 auid=antonio uid=antonio
> gid=antonio euid=antonio
> > suid=antonio fsuid=antonio egid=antonio sgid=antonio
> fsgid=antonio
> > tty=(none) ses=2 comm=wine-preloader
> exe=/usr/bin/wine-preloader
> > subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:30:55.325:63) : avc:*
> denied* { mmap_zero } for
> > pid=1865 comm=wine-preloader
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> >* ---- type=SYSCALL msg=audit(10/06/2011
> 07:30:56.017:64) : arch=i386
> > syscall=mmap success=no exit=-13(Permission denied)
> a0=0xbfb2f918 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1872
> auid=antonio uid=antonio
> > gid=antonio euid=antonio suid=antonio fsuid=antonio
> egid=antonio
> > sgid=antonio fsgid=antonio tty=(none) ses=2
> comm=wine-preloader
> > exe=/usr/bin/wine-preloader
> > subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:30:56.017:64) : avc:*
> denied* { mmap_zero } for
> > pid=1872 comm=wine-preloader
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> >* ---- type=SYSCALL msg=audit(10/06/2011
> 07:30:56.444:65) : arch=i386
> > syscall=mmap success=no exit=-13(Permission denied)
> a0=0xbf832298 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872 pid=1873
> auid=antonio
> > uid=antonio gid=antonio euid=antonio suid=antonio
> fsuid=antonio
> > egid=antonio sgid=antonio fsgid=antonio tty=(none)
> ses=2
> > comm=wine-preloader exe=/usr/bin/wine-preloader
> > subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:30:56.444:65) : avc:*
> denied* { mmap_zero } for
> > pid=1873 comm=wine-preloader
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> >* ---- type=SYSCALL msg=audit(10/06/2011
> 07:30:56.695:66) : arch=i386
> > syscall=mmap success=no exit=-13(Permission denied)
> a0=0xbf8aeff8 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872 pid=1876
> auid=antonio
> > uid=antonio gid=antonio euid=antonio suid=antonio
> fsuid=antonio
> > egid=antonio sgid=antonio fsgid=antonio tty=(none)
> ses=2
> > comm=wine-preloader exe=/usr/bin/wine-preloader
> > subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:30:56.695:66) : avc:*
> denied* { mmap_zero } for
> > pid=1876 comm=wine-preloader
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> >* ---- type=SYSCALL msg=audit(10/06/2011
> 07:31:00.839:68) : arch=i386
> > syscall=mmap success=no exit=-13(Permission denied)
> a0=0xbfac3f28 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1880
> auid=antonio uid=antonio
> > gid=antonio euid=antonio suid=antonio fsuid=antonio
> egid=antonio
> > sgid=antonio fsgid=antonio tty=(none) ses=2
> comm=wine-preloader
> > exe=/usr/bin/wine-preloader
> > subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:31:00.839:68) : avc:*
> denied* { mmap_zero } for
> > pid=1880 comm=wine-preloader
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> >* ---- type=SYSCALL msg=audit(10/06/2011
> 07:31:00.839:67) : arch=i386
> > syscall=mmap success=no exit=-13(Permission denied)
> a0=0xbfed9e88 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1879
> auid=antonio uid=antonio
> > gid=antonio euid=antonio suid=antonio fsuid=antonio
> egid=antonio
> > sgid=antonio fsgid=antonio tty=(none) ses=2
> comm=wine-preloader
> > exe=/usr/bin/wine-preloader
> > subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:31:00.839:67) : avc:*
> denied* { mmap_zero } for
> > pid=1879 comm=wine-preloader
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> >* ---- type=SYSCALL msg=audit(10/06/2011
> 07:31:10.067:69) : arch=i386
> > syscall=mmap success=no exit=-13(Permission denied)
> a0=0xbfe39b38 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876 pid=1892
> auid=antonio
> > uid=antonio gid=antonio euid=antonio suid=antonio
> fsuid=antonio
> > egid=antonio sgid=antonio fsgid=antonio tty=(none)
> ses=2
> > comm=wine-preloader exe=/usr/bin/wine-preloader
> > subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:31:10.067:69) : avc:*
> denied* { mmap_zero } for
> > pid=1892 comm=wine-preloader
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> >* ---- type=SYSCALL msg=audit(10/06/2011
> 07:31:45.589:74) : arch=i386
> > syscall=mmap success=no exit=-13(Permission denied)
> a0=0xbf8ac478 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876 pid=2027
> auid=antonio
> > uid=antonio gid=antonio euid=antonio suid=antonio
> fsuid=antonio
> > egid=antonio sgid=antonio fsgid=antonio tty=(none)
> ses=2
> > comm=wine-preloader exe=/usr/bin/wine-preloader
> > subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:31:45.589:74) : avc:*
> denied* { mmap_zero } for
> > pid=2027 comm=wine-preloader
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> >* ---- type=SYSCALL msg=audit(10/06/2011
> 07:31:46.811:75) : arch=i386
> > syscall=mmap success=no exit=-13(Permission denied)
> a0=0xbfdf4318 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1873 pid=2032
> auid=antonio
> > uid=antonio gid=antonio euid=antonio suid=antonio
> fsuid=antonio
> > egid=antonio sgid=antonio fsgid=antonio tty=(none)
> ses=2
> > comm=wine-preloader exe=/usr/bin/wine-preloader
> > subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:31:46.811:75) : avc:*
> denied* { mmap_zero } for
> > pid=2032 comm=wine-preloader
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> >* ---- type=SYSCALL msg=audit(10/06/2011
> 07:31:47.648:76) : arch=i386
> > syscall=mmap success=no exit=-13(Permission denied)
> a0=0xbf813938 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=2040
> auid=antonio uid=antonio
> > gid=antonio euid=antonio suid=antonio fsuid=antonio
> egid=antonio
> > sgid=antonio fsgid=antonio tty=(none) ses=2
> comm=wine-preloader
> > exe=/usr/bin/wine-preloader
> > subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:31:47.648:76) : avc:*
> denied* { mmap_zero } for
> > pid=2040 comm=wine-preloader
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> >* ---- type=SYSCALL msg=audit(11/29/2011
> 07:10:52.252:87) : arch=i386
> > syscall=open success=no exit=-13(Permission denied)
> a0=0x805db18
> > a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0 items=0
> ppid=1 pid=4108
> > auid=unset uid=root gid=root euid=root suid=root
> fsuid=root egid=root
> > sgid=root fsgid=root tty=(none) ses=unset comm=mcelog
> exe=/usr/sbin/mcelog
> > subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC
> msg=audit(11/29/2011
> > 07:10:52.252:87) : avc:* denied* { create }
> for* pid=4108 comm=mcelog
> > name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
> > tcontext=system_ubject_r:var_run_t:s0 tclass=file
> ---- type=SYSCALL
> > msg=audit(11/29/2011 00:18:06.277:14) : arch=i386
> syscall=open success=no
> > exit=-13(Permission denied) a0=0x805db18
> a1=O_WRONLY|O_CREAT|O_TRUNC
> > a2=0x1b6 a3=0x0 items=0 ppid=1 pid=894 auid=unset
> uid=root gid=root
> > euid=root suid=root fsuid=root egid=root sgid=root
> fsgid=root tty=(none)
> > ses=unset comm=mcelog exe=/usr/sbin/mcelog
> > subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC
> msg=audit(11/29/2011
> > 00:18:06.277:14) : avc:* denied* { create }
> for* pid=894 comm=mcelog
> > name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
> > tcontext=system_ubject_r:var_run_t:s0 tclass=file
> ---- type=SYSCALL
> > msg=audit(12/06/2011 01:54:44.898:13) : arch=i386
> syscall=open success=no
> > exit=-13(Permission denied) a0=0x805db18
> a1=O_WRONLY|O_CREAT|O_TRUNC
> > a2=0x1b6 a3=0x0 items=0 ppid=1 pid=916 auid=unset
> uid=root gid=root
> > euid=root suid=root fsuid=root egid=root sgid=root
> fsgid=root tty=(none)
> > ses=unset comm=mcelog exe=/usr/sbin/mcelog
> > subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC
> msg=audit(12/06/2011
> > 01:54:44.898:13) : avc:* denied* { create }
> for* pid=916 comm=mcelog
> > name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
> > tcontext=system_ubject_r:var_run_t:s0 tclass=file
> >
> > I will do the same in the other machine and copy it
> here inline
> >
> >
> > Thanks,
> >
> >
> > Antonio
>
> rpm -q selinux-policy
> selinux-policy-3.10.0-88.fc16
>
> I believe some of these are fixed in the latest policy.
>

[students@localhost ~]$ rpm -q selinux-policy
selinux-policy-3.10.0-86.fc16.noarch

Thanks,


Antonio
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 05-08-2012, 04:49 PM
Antonio Olivares
 
Default X Hang when starting machine

--- On Tue, 5/8/12, Antonio Olivares <olivares14031@yahoo.com> wrote:

> From: Antonio Olivares <olivares14031@yahoo.com>
> Subject: Re: X Hang when starting machine
> To: "Community support for Fedora users" <users@lists.fedoraproject.org>, "Daniel J Walsh" <dwalsh@redhat.com>
> Date: Tuesday, May 8, 2012, 9:35 AM
>
> > >> Could you attach a compressed "ausearch -i -m
> avc"
> > >
> > > I have updated another machine and run into the
> same
> > problem Starting in
> > > enforcing=0 works
> > >
> > > Here is the output of above command
> > >
> > > [antonio@localhost ~]$ su - Password:
> [root@localhost
> > ~]# ausearch -i -m
> > > avc ---- type=SYSCALL msg=audit(10/05/2011
> > 10:41:15.287:109) : arch=i386
> > > syscall=lsetxattr success=no exit=-22(Invalid
> argument)
> > a0=0xe77af68
> > > a1=0x66f5d2 a2=0xe779d58 a3=0x24 items=0
> ppid=1940
> > pid=1947 auid=antonio
> > > uid=root gid=root euid=root suid=root fsuid=root
> > egid=root sgid=root
> > > fsgid=root tty=pts1 ses=2 comm=yum
> exe=/usr/bin/python
> > > subj=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
> > key=(null) type=AVC
> > > msg=audit(10/05/2011 10:41:15.287:109) : avc:*
> > denied* { mac_admin } for
> > > pid=1947 comm=yum capability=mac_admin
> > >
> scontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
> > >
> tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
> > tclass=capability2
> > > ---- type=SYSCALL msg=audit(10/05/2011
> > 10:45:30.811:127) : arch=i386
> > > syscall=unlinkat success=yes exit=0 a0=0xd
> > a1=0xbf8df2cb a2=0x0
> > > a3=0x8422dd0 items=0 ppid=1 pid=5449 auid=unset
> > uid=root gid=root euid=root
> > > suid=root fsuid=root egid=root sgid=root
> fsgid=root
> > tty=(none) ses=unset
> > > comm=systemd-logind
> exe=/lib/systemd/systemd-logind
> > > subj=system_u:system_r:systemd_logind_t:s0
> key=(null)
> > type=AVC
> > > msg=audit(10/05/2011 10:45:30.811:127) : avc:*
> > denied* { unlink } for
> > > pid=5449 comm=systemd-logind name=user dev=tmpfs
> > ino=21513
> > > scontext=system_u:system_r:systemd_logind_t:s0
> > > tcontext=system_ubject_r:config_home_t:s0
> tclass=file
> > ---- type=SYSCALL
> > > msg=audit(10/06/2011 07:30:55.325:63) : arch=i386
> > syscall=mmap success=no
> > > exit=-13(Permission denied) a0=0xbfbb8f38 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE
> > > items=0 ppid=1 pid=1865 auid=antonio uid=antonio
> > gid=antonio euid=antonio
> > > suid=antonio fsuid=antonio egid=antonio
> sgid=antonio
> > fsgid=antonio
> > > tty=(none) ses=2 comm=wine-preloader
> > exe=/usr/bin/wine-preloader
> > >
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > key=(null) type=AVC
> > > msg=audit(10/06/2011 07:30:55.325:63) : avc:*
> > denied* { mmap_zero } for
> > > pid=1865 comm=wine-preloader
> > >
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > >
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > tclass=memprotect
> > >* ---- type=SYSCALL msg=audit(10/06/2011
> > 07:30:56.017:64) : arch=i386
> > > syscall=mmap success=no exit=-13(Permission
> denied)
> > a0=0xbfb2f918 a1=0x0
> > > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1872
> > auid=antonio uid=antonio
> > > gid=antonio euid=antonio suid=antonio
> fsuid=antonio
> > egid=antonio
> > > sgid=antonio fsgid=antonio tty=(none) ses=2
> > comm=wine-preloader
> > > exe=/usr/bin/wine-preloader
> > >
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > key=(null) type=AVC
> > > msg=audit(10/06/2011 07:30:56.017:64) : avc:*
> > denied* { mmap_zero } for
> > > pid=1872 comm=wine-preloader
> > >
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > >
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > tclass=memprotect
> > >* ---- type=SYSCALL msg=audit(10/06/2011
> > 07:30:56.444:65) : arch=i386
> > > syscall=mmap success=no exit=-13(Permission
> denied)
> > a0=0xbf832298 a1=0x0
> > > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872
> pid=1873
> > auid=antonio
> > > uid=antonio gid=antonio euid=antonio suid=antonio
> > fsuid=antonio
> > > egid=antonio sgid=antonio fsgid=antonio
> tty=(none)
> > ses=2
> > > comm=wine-preloader exe=/usr/bin/wine-preloader
> > >
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > key=(null) type=AVC
> > > msg=audit(10/06/2011 07:30:56.444:65) : avc:*
> > denied* { mmap_zero } for
> > > pid=1873 comm=wine-preloader
> > >
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > >
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > tclass=memprotect
> > >* ---- type=SYSCALL msg=audit(10/06/2011
> > 07:30:56.695:66) : arch=i386
> > > syscall=mmap success=no exit=-13(Permission
> denied)
> > a0=0xbf8aeff8 a1=0x0
> > > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872
> pid=1876
> > auid=antonio
> > > uid=antonio gid=antonio euid=antonio suid=antonio
> > fsuid=antonio
> > > egid=antonio sgid=antonio fsgid=antonio
> tty=(none)
> > ses=2
> > > comm=wine-preloader exe=/usr/bin/wine-preloader
> > >
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > key=(null) type=AVC
> > > msg=audit(10/06/2011 07:30:56.695:66) : avc:*
> > denied* { mmap_zero } for
> > > pid=1876 comm=wine-preloader
> > >
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > >
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > tclass=memprotect
> > >* ---- type=SYSCALL msg=audit(10/06/2011
> > 07:31:00.839:68) : arch=i386
> > > syscall=mmap success=no exit=-13(Permission
> denied)
> > a0=0xbfac3f28 a1=0x0
> > > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1880
> > auid=antonio uid=antonio
> > > gid=antonio euid=antonio suid=antonio
> fsuid=antonio
> > egid=antonio
> > > sgid=antonio fsgid=antonio tty=(none) ses=2
> > comm=wine-preloader
> > > exe=/usr/bin/wine-preloader
> > >
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > key=(null) type=AVC
> > > msg=audit(10/06/2011 07:31:00.839:68) : avc:*
> > denied* { mmap_zero } for
> > > pid=1880 comm=wine-preloader
> > >
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > >
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > tclass=memprotect
> > >* ---- type=SYSCALL msg=audit(10/06/2011
> > 07:31:00.839:67) : arch=i386
> > > syscall=mmap success=no exit=-13(Permission
> denied)
> > a0=0xbfed9e88 a1=0x0
> > > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1879
> > auid=antonio uid=antonio
> > > gid=antonio euid=antonio suid=antonio
> fsuid=antonio
> > egid=antonio
> > > sgid=antonio fsgid=antonio tty=(none) ses=2
> > comm=wine-preloader
> > > exe=/usr/bin/wine-preloader
> > >
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > key=(null) type=AVC
> > > msg=audit(10/06/2011 07:31:00.839:67) : avc:*
> > denied* { mmap_zero } for
> > > pid=1879 comm=wine-preloader
> > >
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > >
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > tclass=memprotect
> > >* ---- type=SYSCALL msg=audit(10/06/2011
> > 07:31:10.067:69) : arch=i386
> > > syscall=mmap success=no exit=-13(Permission
> denied)
> > a0=0xbfe39b38 a1=0x0
> > > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876
> pid=1892
> > auid=antonio
> > > uid=antonio gid=antonio euid=antonio suid=antonio
> > fsuid=antonio
> > > egid=antonio sgid=antonio fsgid=antonio
> tty=(none)
> > ses=2
> > > comm=wine-preloader exe=/usr/bin/wine-preloader
> > >
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > key=(null) type=AVC
> > > msg=audit(10/06/2011 07:31:10.067:69) : avc:*
> > denied* { mmap_zero } for
> > > pid=1892 comm=wine-preloader
> > >
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > >
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > tclass=memprotect
> > >* ---- type=SYSCALL msg=audit(10/06/2011
> > 07:31:45.589:74) : arch=i386
> > > syscall=mmap success=no exit=-13(Permission
> denied)
> > a0=0xbf8ac478 a1=0x0
> > > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876
> pid=2027
> > auid=antonio
> > > uid=antonio gid=antonio euid=antonio suid=antonio
> > fsuid=antonio
> > > egid=antonio sgid=antonio fsgid=antonio
> tty=(none)
> > ses=2
> > > comm=wine-preloader exe=/usr/bin/wine-preloader
> > >
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > key=(null) type=AVC
> > > msg=audit(10/06/2011 07:31:45.589:74) : avc:*
> > denied* { mmap_zero } for
> > > pid=2027 comm=wine-preloader
> > >
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > >
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > tclass=memprotect
> > >* ---- type=SYSCALL msg=audit(10/06/2011
> > 07:31:46.811:75) : arch=i386
> > > syscall=mmap success=no exit=-13(Permission
> denied)
> > a0=0xbfdf4318 a1=0x0
> > > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1873
> pid=2032
> > auid=antonio
> > > uid=antonio gid=antonio euid=antonio suid=antonio
> > fsuid=antonio
> > > egid=antonio sgid=antonio fsgid=antonio
> tty=(none)
> > ses=2
> > > comm=wine-preloader exe=/usr/bin/wine-preloader
> > >
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > key=(null) type=AVC
> > > msg=audit(10/06/2011 07:31:46.811:75) : avc:*
> > denied* { mmap_zero } for
> > > pid=2032 comm=wine-preloader
> > >
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > >
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > tclass=memprotect
> > >* ---- type=SYSCALL msg=audit(10/06/2011
> > 07:31:47.648:76) : arch=i386
> > > syscall=mmap success=no exit=-13(Permission
> denied)
> > a0=0xbf813938 a1=0x0
> > > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=2040
> > auid=antonio uid=antonio
> > > gid=antonio euid=antonio suid=antonio
> fsuid=antonio
> > egid=antonio
> > > sgid=antonio fsgid=antonio tty=(none) ses=2
> > comm=wine-preloader
> > > exe=/usr/bin/wine-preloader
> > >
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > key=(null) type=AVC
> > > msg=audit(10/06/2011 07:31:47.648:76) : avc:*
> > denied* { mmap_zero } for
> > > pid=2040 comm=wine-preloader
> > >
> >
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > >
> >
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> > tclass=memprotect
> > >* ---- type=SYSCALL msg=audit(11/29/2011
> > 07:10:52.252:87) : arch=i386
> > > syscall=open success=no exit=-13(Permission
> denied)
> > a0=0x805db18
> > > a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0
> items=0
> > ppid=1 pid=4108
> > > auid=unset uid=root gid=root euid=root suid=root
> > fsuid=root egid=root
> > > sgid=root fsgid=root tty=(none) ses=unset
> comm=mcelog
> > exe=/usr/sbin/mcelog
> > > subj=system_u:system_r:mcelog_t:s0 key=(null)
> type=AVC
> > msg=audit(11/29/2011
> > > 07:10:52.252:87) : avc:* denied* { create }
> > for* pid=4108 comm=mcelog
> > > name=mcelog.pid
> scontext=system_u:system_r:mcelog_t:s0
> > > tcontext=system_ubject_r:var_run_t:s0
> tclass=file
> > ---- type=SYSCALL
> > > msg=audit(11/29/2011 00:18:06.277:14) : arch=i386
> > syscall=open success=no
> > > exit=-13(Permission denied) a0=0x805db18
> > a1=O_WRONLY|O_CREAT|O_TRUNC
> > > a2=0x1b6 a3=0x0 items=0 ppid=1 pid=894 auid=unset
> > uid=root gid=root
> > > euid=root suid=root fsuid=root egid=root
> sgid=root
> > fsgid=root tty=(none)
> > > ses=unset comm=mcelog exe=/usr/sbin/mcelog
> > > subj=system_u:system_r:mcelog_t:s0 key=(null)
> type=AVC
> > msg=audit(11/29/2011
> > > 00:18:06.277:14) : avc:* denied* { create }
> > for* pid=894 comm=mcelog
> > > name=mcelog.pid
> scontext=system_u:system_r:mcelog_t:s0
> > > tcontext=system_ubject_r:var_run_t:s0
> tclass=file
> > ---- type=SYSCALL
> > > msg=audit(12/06/2011 01:54:44.898:13) : arch=i386
> > syscall=open success=no
> > > exit=-13(Permission denied) a0=0x805db18
> > a1=O_WRONLY|O_CREAT|O_TRUNC
> > > a2=0x1b6 a3=0x0 items=0 ppid=1 pid=916 auid=unset
> > uid=root gid=root
> > > euid=root suid=root fsuid=root egid=root
> sgid=root
> > fsgid=root tty=(none)
> > > ses=unset comm=mcelog exe=/usr/sbin/mcelog
> > > subj=system_u:system_r:mcelog_t:s0 key=(null)
> type=AVC
> > msg=audit(12/06/2011
> > > 01:54:44.898:13) : avc:* denied* { create }
> > for* pid=916 comm=mcelog
> > > name=mcelog.pid
> scontext=system_u:system_r:mcelog_t:s0
> > > tcontext=system_ubject_r:var_run_t:s0
> tclass=file
> > >
> > > I will do the same in the other machine and copy
> it
> > here inline
> > >
> > >
> > > Thanks,
> > >
> > >
> > > Antonio
> >
> > rpm -q selinux-policy
> > selinux-policy-3.10.0-88.fc16
> >
> > I believe some of these are fixed in the latest
> policy.
> >
>
> [students@localhost ~]$ rpm -q selinux-policy
> selinux-policy-3.10.0-86.fc16.noarch
>
> Thanks,
>
>
> Antonio
> --

But updates do not show your new -88 policy

Loaded plugins: langpacks, presto, refresh-packagekit
Cleaning repos: adobe-linux-x86_64 fedora updates updates-testing
Cleaning up Everything
No delta-package files removed by presto
Loaded plugins: langpacks, presto, refresh-packagekit
Cleaning repos: adobe-linux-x86_64 fedora updates updates-testing
0 metadata files removed
0 sqlite files removed
0 metadata files removed
Loaded plugins: langpacks, presto, refresh-packagekit
adobe-linux-x86_64 | 951 B 00:00
adobe-linux-x86_64/primary | 1.2 kB 00:00
fedora/metalink | 21 kB 00:00
fedora | 4.2 kB 00:00
fedora/primary_db | 14 MB 02:15
fedora/group_gz | 431 kB 00:01
updates/metalink | 16 kB 00:00
updates | 4.5 kB 00:00
updates/primary_db | 6.1 MB 00:16
updates/group_gz | 435 kB 00:01
updates-testing/metalink | 15 kB 00:00
updates-testing | 4.5 kB 00:00
updates-testing/primary_db | 1.2 MB 00:05
updates-testing/group_gz | 435 kB 00:01
adobe-linux-x86_64 2/2
No Packages marked for Update


Regards,


Antonio
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 05-08-2012, 04:57 PM
Daniel J Walsh
 
Default X Hang when starting machine

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/08/2012 10:26 AM, Antonio Olivares wrote:
>> Could you attach a compressed "ausearch -i -m avc"
>>
>
> Started machine in level 3 and can log in in "Fallback Mode", here's
> compressed file.
>
> Regards,
>
>
> Antonio

The only AVC's that I see as not being allowed in the latest selinux-policy are:


allow rpm_t self:capability2 mac_admin;


This indicates that some rpm you installed is trying to set a label that the
current policy does not understand.

allow wine_t self:memprotect mmap_zero;

Wine wants to mmap kernel memory at a zero address space. If you really need
this then turn on the mmap_low_allowed boolean. If you wine apps seem to be
working fine, then I would add a dontaudit for this avc.

allow accountsd_t proc_t:file read;

I just added a fix for this in selinux-policy-3.10.0-123.fc17.

allow mcelog_t var_run_t:file create;

mcelog writing to /var/run should not transition the label to something mcelog
should be able to handle.

None of these seem to be around X though.





-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk+pUJQACgkQrlYvE4MpobOW/gCfQNb6beCUrvs+KLMDYrIU4XKw
+XAAoOeImXQRGLeKm0F2mIgtPOOw1lYH
=usOP
-----END PGP SIGNATURE-----
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 05-08-2012, 04:59 PM
Daniel J Walsh
 
Default X Hang when starting machine

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/08/2012 12:49 PM, Antonio Olivares wrote:
>
>
> --- On Tue, 5/8/12, Antonio Olivares <olivares14031@yahoo.com> wrote:
>
>> From: Antonio Olivares <olivares14031@yahoo.com> Subject: Re: X Hang when
>> starting machine To: "Community support for Fedora users"
>> <users@lists.fedoraproject.org>, "Daniel J Walsh" <dwalsh@redhat.com>
>> Date: Tuesday, May 8, 2012, 9:35 AM
>>
>>>>> Could you attach a compressed "ausearch -i -m
>> avc"
>>>>
>>>> I have updated another machine and run into the
>> same
>>> problem Starting in
>>>> enforcing=0 works
>>>>
>>>> Here is the output of above command
>>>>
>>>> [antonio@localhost ~]$ su - Password:
>> [root@localhost
>>> ~]# ausearch -i -m
>>>> avc ---- type=SYSCALL msg=audit(10/05/2011
>>> 10:41:15.287:109) : arch=i386
>>>> syscall=lsetxattr success=no exit=-22(Invalid
>> argument)
>>> a0=0xe77af68
>>>> a1=0x66f5d2 a2=0xe779d58 a3=0x24 items=0
>> ppid=1940
>>> pid=1947 auid=antonio
>>>> uid=root gid=root euid=root suid=root fsuid=root
>>> egid=root sgid=root
>>>> fsgid=root tty=pts1 ses=2 comm=yum
>> exe=/usr/bin/python
>>>> subj=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
>>> key=(null) type=AVC
>>>> msg=audit(10/05/2011 10:41:15.287:109) : avc:
>>> denied { mac_admin } for
>>>> pid=1947 comm=yum capability=mac_admin
>>>>
>> scontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
>>>>
>> tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
>>> tclass=capability2
>>>> ---- type=SYSCALL msg=audit(10/05/2011
>>> 10:45:30.811:127) : arch=i386
>>>> syscall=unlinkat success=yes exit=0 a0=0xd
>>> a1=0xbf8df2cb a2=0x0
>>>> a3=0x8422dd0 items=0 ppid=1 pid=5449 auid=unset
>>> uid=root gid=root euid=root
>>>> suid=root fsuid=root egid=root sgid=root
>> fsgid=root
>>> tty=(none) ses=unset
>>>> comm=systemd-logind
>> exe=/lib/systemd/systemd-logind
>>>> subj=system_u:system_r:systemd_logind_t:s0
>> key=(null)
>>> type=AVC
>>>> msg=audit(10/05/2011 10:45:30.811:127) : avc:
>>> denied { unlink } for
>>>> pid=5449 comm=systemd-logind name=user dev=tmpfs
>>> ino=21513
>>>> scontext=system_u:system_r:systemd_logind_t:s0
>>>> tcontext=system_ubject_r:config_home_t:s0
>> tclass=file
>>> ---- type=SYSCALL
>>>> msg=audit(10/06/2011 07:30:55.325:63) : arch=i386
>>> syscall=mmap success=no
>>>> exit=-13(Permission denied) a0=0xbfbb8f38 a1=0x0
>>> a2=PROT_NONE a3=MAP_FILE
>>>> items=0 ppid=1 pid=1865 auid=antonio uid=antonio
>>> gid=antonio euid=antonio
>>>> suid=antonio fsuid=antonio egid=antonio
>> sgid=antonio
>>> fsgid=antonio
>>>> tty=(none) ses=2 comm=wine-preloader
>>> exe=/usr/bin/wine-preloader
>>>>
>> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> key=(null) type=AVC
>>>> msg=audit(10/06/2011 07:30:55.325:63) : avc:
>>> denied { mmap_zero } for
>>>> pid=1865 comm=wine-preloader
>>>>
>>>
>> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>>
>>>
>> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> tclass=memprotect
>>>> ---- type=SYSCALL msg=audit(10/06/2011
>>> 07:30:56.017:64) : arch=i386
>>>> syscall=mmap success=no exit=-13(Permission
>> denied)
>>> a0=0xbfb2f918 a1=0x0
>>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1872
>>> auid=antonio uid=antonio
>>>> gid=antonio euid=antonio suid=antonio
>> fsuid=antonio
>>> egid=antonio
>>>> sgid=antonio fsgid=antonio tty=(none) ses=2
>>> comm=wine-preloader
>>>> exe=/usr/bin/wine-preloader
>>>>
>> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> key=(null) type=AVC
>>>> msg=audit(10/06/2011 07:30:56.017:64) : avc:
>>> denied { mmap_zero } for
>>>> pid=1872 comm=wine-preloader
>>>>
>>>
>> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>>
>>>
>> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> tclass=memprotect
>>>> ---- type=SYSCALL msg=audit(10/06/2011
>>> 07:30:56.444:65) : arch=i386
>>>> syscall=mmap success=no exit=-13(Permission
>> denied)
>>> a0=0xbf832298 a1=0x0
>>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872
>> pid=1873
>>> auid=antonio
>>>> uid=antonio gid=antonio euid=antonio suid=antonio
>>> fsuid=antonio
>>>> egid=antonio sgid=antonio fsgid=antonio
>> tty=(none)
>>> ses=2
>>>> comm=wine-preloader exe=/usr/bin/wine-preloader
>>>>
>> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> key=(null) type=AVC
>>>> msg=audit(10/06/2011 07:30:56.444:65) : avc:
>>> denied { mmap_zero } for
>>>> pid=1873 comm=wine-preloader
>>>>
>>>
>> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>>
>>>
>> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> tclass=memprotect
>>>> ---- type=SYSCALL msg=audit(10/06/2011
>>> 07:30:56.695:66) : arch=i386
>>>> syscall=mmap success=no exit=-13(Permission
>> denied)
>>> a0=0xbf8aeff8 a1=0x0
>>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872
>> pid=1876
>>> auid=antonio
>>>> uid=antonio gid=antonio euid=antonio suid=antonio
>>> fsuid=antonio
>>>> egid=antonio sgid=antonio fsgid=antonio
>> tty=(none)
>>> ses=2
>>>> comm=wine-preloader exe=/usr/bin/wine-preloader
>>>>
>> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> key=(null) type=AVC
>>>> msg=audit(10/06/2011 07:30:56.695:66) : avc:
>>> denied { mmap_zero } for
>>>> pid=1876 comm=wine-preloader
>>>>
>>>
>> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>>
>>>
>> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> tclass=memprotect
>>>> ---- type=SYSCALL msg=audit(10/06/2011
>>> 07:31:00.839:68) : arch=i386
>>>> syscall=mmap success=no exit=-13(Permission
>> denied)
>>> a0=0xbfac3f28 a1=0x0
>>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1880
>>> auid=antonio uid=antonio
>>>> gid=antonio euid=antonio suid=antonio
>> fsuid=antonio
>>> egid=antonio
>>>> sgid=antonio fsgid=antonio tty=(none) ses=2
>>> comm=wine-preloader
>>>> exe=/usr/bin/wine-preloader
>>>>
>> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> key=(null) type=AVC
>>>> msg=audit(10/06/2011 07:31:00.839:68) : avc:
>>> denied { mmap_zero } for
>>>> pid=1880 comm=wine-preloader
>>>>
>>>
>> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>>
>>>
>> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> tclass=memprotect
>>>> ---- type=SYSCALL msg=audit(10/06/2011
>>> 07:31:00.839:67) : arch=i386
>>>> syscall=mmap success=no exit=-13(Permission
>> denied)
>>> a0=0xbfed9e88 a1=0x0
>>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1879
>>> auid=antonio uid=antonio
>>>> gid=antonio euid=antonio suid=antonio
>> fsuid=antonio
>>> egid=antonio
>>>> sgid=antonio fsgid=antonio tty=(none) ses=2
>>> comm=wine-preloader
>>>> exe=/usr/bin/wine-preloader
>>>>
>> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> key=(null) type=AVC
>>>> msg=audit(10/06/2011 07:31:00.839:67) : avc:
>>> denied { mmap_zero } for
>>>> pid=1879 comm=wine-preloader
>>>>
>>>
>> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>>
>>>
>> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> tclass=memprotect
>>>> ---- type=SYSCALL msg=audit(10/06/2011
>>> 07:31:10.067:69) : arch=i386
>>>> syscall=mmap success=no exit=-13(Permission
>> denied)
>>> a0=0xbfe39b38 a1=0x0
>>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876
>> pid=1892
>>> auid=antonio
>>>> uid=antonio gid=antonio euid=antonio suid=antonio
>>> fsuid=antonio
>>>> egid=antonio sgid=antonio fsgid=antonio
>> tty=(none)
>>> ses=2
>>>> comm=wine-preloader exe=/usr/bin/wine-preloader
>>>>
>> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> key=(null) type=AVC
>>>> msg=audit(10/06/2011 07:31:10.067:69) : avc:
>>> denied { mmap_zero } for
>>>> pid=1892 comm=wine-preloader
>>>>
>>>
>> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>>
>>>
>> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> tclass=memprotect
>>>> ---- type=SYSCALL msg=audit(10/06/2011
>>> 07:31:45.589:74) : arch=i386
>>>> syscall=mmap success=no exit=-13(Permission
>> denied)
>>> a0=0xbf8ac478 a1=0x0
>>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876
>> pid=2027
>>> auid=antonio
>>>> uid=antonio gid=antonio euid=antonio suid=antonio
>>> fsuid=antonio
>>>> egid=antonio sgid=antonio fsgid=antonio
>> tty=(none)
>>> ses=2
>>>> comm=wine-preloader exe=/usr/bin/wine-preloader
>>>>
>> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> key=(null) type=AVC
>>>> msg=audit(10/06/2011 07:31:45.589:74) : avc:
>>> denied { mmap_zero } for
>>>> pid=2027 comm=wine-preloader
>>>>
>>>
>> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>>
>>>
>> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> tclass=memprotect
>>>> ---- type=SYSCALL msg=audit(10/06/2011
>>> 07:31:46.811:75) : arch=i386
>>>> syscall=mmap success=no exit=-13(Permission
>> denied)
>>> a0=0xbfdf4318 a1=0x0
>>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1873
>> pid=2032
>>> auid=antonio
>>>> uid=antonio gid=antonio euid=antonio suid=antonio
>>> fsuid=antonio
>>>> egid=antonio sgid=antonio fsgid=antonio
>> tty=(none)
>>> ses=2
>>>> comm=wine-preloader exe=/usr/bin/wine-preloader
>>>>
>> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> key=(null) type=AVC
>>>> msg=audit(10/06/2011 07:31:46.811:75) : avc:
>>> denied { mmap_zero } for
>>>> pid=2032 comm=wine-preloader
>>>>
>>>
>> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>>
>>>
>> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> tclass=memprotect
>>>> ---- type=SYSCALL msg=audit(10/06/2011
>>> 07:31:47.648:76) : arch=i386
>>>> syscall=mmap success=no exit=-13(Permission
>> denied)
>>> a0=0xbf813938 a1=0x0
>>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=2040
>>> auid=antonio uid=antonio
>>>> gid=antonio euid=antonio suid=antonio
>> fsuid=antonio
>>> egid=antonio
>>>> sgid=antonio fsgid=antonio tty=(none) ses=2
>>> comm=wine-preloader
>>>> exe=/usr/bin/wine-preloader
>>>>
>> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> key=(null) type=AVC
>>>> msg=audit(10/06/2011 07:31:47.648:76) : avc:
>>> denied { mmap_zero } for
>>>> pid=2040 comm=wine-preloader
>>>>
>>>
>> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>>
>>>
>> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>> tclass=memprotect
>>>> ---- type=SYSCALL msg=audit(11/29/2011
>>> 07:10:52.252:87) : arch=i386
>>>> syscall=open success=no exit=-13(Permission
>> denied)
>>> a0=0x805db18
>>>> a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0
>> items=0
>>> ppid=1 pid=4108
>>>> auid=unset uid=root gid=root euid=root suid=root
>>> fsuid=root egid=root
>>>> sgid=root fsgid=root tty=(none) ses=unset
>> comm=mcelog
>>> exe=/usr/sbin/mcelog
>>>> subj=system_u:system_r:mcelog_t:s0 key=(null)
>> type=AVC
>>> msg=audit(11/29/2011
>>>> 07:10:52.252:87) : avc: denied { create }
>>> for pid=4108 comm=mcelog
>>>> name=mcelog.pid
>> scontext=system_u:system_r:mcelog_t:s0
>>>> tcontext=system_ubject_r:var_run_t:s0
>> tclass=file
>>> ---- type=SYSCALL
>>>> msg=audit(11/29/2011 00:18:06.277:14) : arch=i386
>>> syscall=open success=no
>>>> exit=-13(Permission denied) a0=0x805db18
>>> a1=O_WRONLY|O_CREAT|O_TRUNC
>>>> a2=0x1b6 a3=0x0 items=0 ppid=1 pid=894 auid=unset
>>> uid=root gid=root
>>>> euid=root suid=root fsuid=root egid=root
>> sgid=root
>>> fsgid=root tty=(none)
>>>> ses=unset comm=mcelog exe=/usr/sbin/mcelog
>>>> subj=system_u:system_r:mcelog_t:s0 key=(null)
>> type=AVC
>>> msg=audit(11/29/2011
>>>> 00:18:06.277:14) : avc: denied { create }
>>> for pid=894 comm=mcelog
>>>> name=mcelog.pid
>> scontext=system_u:system_r:mcelog_t:s0
>>>> tcontext=system_ubject_r:var_run_t:s0
>> tclass=file
>>> ---- type=SYSCALL
>>>> msg=audit(12/06/2011 01:54:44.898:13) : arch=i386
>>> syscall=open success=no
>>>> exit=-13(Permission denied) a0=0x805db18
>>> a1=O_WRONLY|O_CREAT|O_TRUNC
>>>> a2=0x1b6 a3=0x0 items=0 ppid=1 pid=916 auid=unset
>>> uid=root gid=root
>>>> euid=root suid=root fsuid=root egid=root
>> sgid=root
>>> fsgid=root tty=(none)
>>>> ses=unset comm=mcelog exe=/usr/sbin/mcelog
>>>> subj=system_u:system_r:mcelog_t:s0 key=(null)
>> type=AVC
>>> msg=audit(12/06/2011
>>>> 01:54:44.898:13) : avc: denied { create }
>>> for pid=916 comm=mcelog
>>>> name=mcelog.pid
>> scontext=system_u:system_r:mcelog_t:s0
>>>> tcontext=system_ubject_r:var_run_t:s0
>> tclass=file
>>>>
>>>> I will do the same in the other machine and copy
>> it
>>> here inline
>>>>
>>>>
>>>> Thanks,
>>>>
>>>>
>>>> Antonio
>>>
>>> rpm -q selinux-policy selinux-policy-3.10.0-88.fc16
>>>
>>> I believe some of these are fixed in the latest
>> policy.
>>>
>>
>> [students@localhost ~]$ rpm -q selinux-policy
>> selinux-policy-3.10.0-86.fc16.noarch
>>
>> Thanks,
>>
>>
>> Antonio --
>
> But updates do not show your new -88 policy
>
> Loaded plugins: langpacks, presto, refresh-packagekit Cleaning repos:
> adobe-linux-x86_64 fedora updates updates-testing Cleaning up Everything No
> delta-package files removed by presto Loaded plugins: langpacks, presto,
> refresh-packagekit Cleaning repos: adobe-linux-x86_64 fedora updates
> updates-testing 0 metadata files removed 0 sqlite files removed 0 metadata
> files removed Loaded plugins: langpacks, presto, refresh-packagekit
> adobe-linux-x86_64 | 951 B 00:00
> adobe-linux-x86_64/primary | 1.2 kB
> 00:00 fedora/metalink | 21 kB
> 00:00 fedora | 4.2 kB
> 00:00 fedora/primary_db | 14 MB
> 02:15 fedora/group_gz | 431 kB
> 00:01 updates/metalink | 16 kB
> 00:00 updates | 4.5 kB
> 00:00 updates/primary_db | 6.1 MB
> 00:16 updates/group_gz | 435 kB
> 00:01 updates-testing/metalink | 15 kB
> 00:00 updates-testing | 4.5 kB
> 00:00 updates-testing/primary_db | 1.2 MB
> 00:05 updates-testing/group_gz | 435 kB
> 00:01 adobe-linux-x86_64
> 2/2 No Packages marked for Update
>
>
> Regards,
>
>
> Antonio
Yes 86 is the only one in testing right now. 88 will be next.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk+pUQUACgkQrlYvE4MpobPoNwCgoUw4MAoeir KqiYwpB3mwMEPb
UPoAoL8e6COhZcOuKL+rqpUklmbViAi7
=ZEPZ
-----END PGP SIGNATURE-----
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 05-08-2012, 09:52 PM
Ed Greshko
 
Default X Hang when starting machine

On 05/09/2012 12:59 AM, Daniel J Walsh wrote:
>
> Yes 86 is the only one in testing right now. 88 will be next.


One of you may want to invest in trimming posts..... My scroll wheel is wearing
out. :-) :-)

--
Never be afraid to laugh at yourself, after all, you could be missing out on the joke
of the century. -- Dame Edna Everage

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 

Thread Tools




All times are GMT. The time now is 04:27 PM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org