# uname -r
2.6.35.14-103.fc14.i686.PAE
I haven't paid much attention to avc warnings.
did /.autorelabel, reboot, to see if that could stop avc.
Still see
'avc: denied' in auditlog, involving firefox, plugin-config,...
last 6 of # grep -n avc audit.log:
279:type=AVC msg=audit(1321983739.130:242): avc: denied { read } for
pid=20223 comm="ldd" name="firefox" dev=sda8 ino=999863
scontext=system_u:system_r:setroubleshootd_t:s0
tcontext=system_u:object_r:mozilla_exec_t:s0 tclass=file
281:type=AVC msg=audit(1321983739.134:243): avc: denied { sys_ptrace
} for pid=20215 comm="setroubleshootd" capability=19
scontext=system_u:system_r:setroubleshootd_t:s0
tcontext=system_u:system_r:setroubleshootd_t:s0 tclass=capability
283:type=AVC msg=audit(1321983739.312:244): avc: denied { read } for
pid=20225 comm="ldd" name="firefox" dev=sda8 ino=999863
scontext=system_u:system_r:setroubleshootd_t:s0
tcontext=system_u:object_r:mozilla_exec_t:s0 tclass=file
285:type=AVC msg=audit(1321983739.314:245): avc: denied { sys_ptrace
} for pid=20215 comm="setroubleshootd" capability=19
scontext=system_u:system_r:setroubleshootd_t:s0
tcontext=system_u:system_r:setroubleshootd_t:s0 tclass=capability
302:type=AVC msg=audit(1321989501.906:261): avc: denied { execstack
} for pid=21019 comm="plugin-config"
scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tclass=process
304:type=AVC msg=audit(1321989519.158:262): avc: denied { read } for
pid=21046 comm="ldd" name="plugin-config" dev=sda8 ino=1000054
scontext=system_u:system_r:setroubleshootd_t:s0
tcontext=system_u:object_r:nsplugin_config_exec_t:s0 tclass=file
[root@f14 audit]#
no 'file_t' seen:
[root@f14 audit]# grep file_t audit.log
[root@f14 audit]#
I have put only minimal effort into learning selinux syntax, methods.
Overwhelming, to me.
are there simple rules on how to respond to 'avc denied'?
If I do nothing?
Jack
--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
