Felipe Alfaro Solana wrote:
Hi!
With selinux-policy-targeted, I get this during boot:
audit(1095721178.335:0): avc: denied { associate } for pid=508
exe=/sbin/restorecon name=initctl dev=tmpfs ino=1992
scontext=system_u:object_r:initctl_t
tcontext=system_u:object_r:tmpfs_t tclass=filesystem
audit(1095721179.084:0): avc: denied { associate } for pid=721
exe=/usr/sbin/setfiles name=initctl dev=tmpfs ino=1992
scontext=system_u:object_r:initctl_t
tcontext=system_u:object_r:tmpfs_t tclass=filesystem
which seem related related to "/dev/initctl".
audit(1095721179.097:0): avc: denied { associate } for pid=721
exe=/usr/sbin/setfiles name=.udev.tdb dev=tmpfs ino=366
scontext=system_u:object_r:udev_tbl_t
tcontext=system_u:object_r:tmpfs_t tclass=filesystem
which is related to /dev/.udev.tdb
Latest policy should fix these.
audit(1095714008.289:0): avc: denied { setrlimit } for pid=2218
exe=/usr/sbin/named scontext=user_u:system_r:named_t
tcontext=user_u:system_r:named_t tclass=process
related to bind
Added a rule to allow this in policy.
audit(1095714008.771:0): avc: denied { read } for pid=2251
exe=/usr/sbin/ntpd name=drift dev=hda2 ino=10289214
scontext=user_u:system_r:ntpd_t tcontext=system_u:object_r:file_t
tclass=file
Which drift file are you accessing and where is it located? It should
not be marked file_t?
related to ntpd.
Any ideas?
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
http://www.redhat.com/mailman/listinfo/fedora-selinux-list
| 
