Choosing A Webhost:
A web hosting service is a type of Internet hosting service that allows individuals and organizations to provide their own website accessible via the World Wide Web. Web hosts are companies that provide space on a server they own for use by their clients as well as providing Internet connectivity, typically in a data center. Web hosts can also provide data center space and connectivity to the Internet for servers they do not own to be located in their data center, called colocation. more...
|
Re: SELinux AVCs with swap stored in LVM volume: msg#00175
|
Subject: |
Re: SELinux AVCs with swap stored in LVM volume |
On Mon, 2005-10-31 at 09:47 -0500, Daniel J Walsh wrote:
> The fd:use and blk_file read is caused by a kernel bug. Basically the
> kernel is leaking open file descriptors to subprocesses and SELinux is
> preventing access to these leaked file descriptors. This is a good
> thing, since these processes could gain would be able to manipulate
> these file descriptors. SELinux is great at detecting and preventing
> this type of problem. This has been reported to bugsilla. Reviewing
> you dmesg file also reveals that you have blkid.tab labeled incorrectly.
I think it may be a lvm bug rather than a kernel bug, so you may want to
re-assign it in bugzilla. Note that anything that runs prior to initial
policy load by /sbin/init or anything that runs as a usermode helper
from the kernel without a domain transition defined will run with type
kernel_t.
--
Stephen Smalley
National Security Agency
|
| |
