Re: other Raw Hide avc messages

Joe Orton wrote:

> selinux-policy-targeted-1.21.5-1
> kernel-2.6.10-1.1115_FC4
>
> one lot of:
>
> type=KERNEL msg=audit(1107189317.896:165031): avc:  denied  { create } 
> for  pid= 3061 exe=/usr/sbin/htt_server name=.iiimp-unix 
> scontext=user_u:system_r:i18n_inp ut_t 
> tcontext=user_u:object_r:i18n_input_var_run_t tclass=dir
> and many times:
>
> type=KERNEL msg=audit(1107189602.159:494563): avc:  denied  { transition 
> } for pid=3596 exe=/usr/sbin/crond path=/bin/bash dev=hda3 ino=1933320 
> scontext=user_u :system_r:crond_t 
> tcontext=system_u:system_r:unconfined_t tclass=process
> which seems to mean that all cron scripts are failing and I am getting a 
>
> execl: couldn't exec `/bin/sh'
> execl: Permission denied
>
> message from crond every couple of minutes.
>
> joe
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list@xxxxxxxxxx
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list
>  
Could you check out the selinux-policy-targeted-1.21.5-1 on

ftp://people.redhat.com/dwalsh/selinux/Fedora

I think this fixes the crond problem.  I will fix the htt_server problem 
in 1.21.5-2