-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 05/08/2012 10:26 AM, Antonio Olivares wrote: >> Could you attach a compressed "ausearch -i -m avc" >> > > Started machine in level 3 and can log in in "Fallback Mode", here's > compressed file. > > Regards, > > > Antonio The only AVC's that I see as not being allowed in the latest selinux-policy are: allow rpm_t self:capability2 mac_admin; This indicates that some rpm you installed is trying to set a label that the current policy does not understand. allow wine_t self:memprotect mmap_zero; Wine wants to mmap kernel memory at a zero address space. If you really need this then turn on the mmap_low_allowed boolean. If you wine apps seem to be working fine, then I would add a dontaudit for this avc. allow accountsd_t proc_t:file read; I just added a fix for this in selinux-policy-3.10.0-123.fc17. allow mcelog_t var_run_t:file create; mcelog writing to /var/run should not transition the label to something mcelog should be able to handle. None of these seem to be around X though. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+pUJQACgkQrlYvE4MpobOW/gCfQNb6beCUrvs+KLMDYrIU4XKw +XAAoOeImXQRGLeKm0F2mIgtPOOw1lYH =usOP -----END PGP SIGNATURE----- -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
