Re: Booting problems with kernel and selinux

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> > louisg00@xxxxxxxxxxxxx wrote:
> >
> >    Just installed rawhide yesterday and noticed a kernel panic when in selinux enforcing mode. I
> > appended selinux=0 and it booted right up. Todays kernel (1884) did not panic but got stuck on 
> > starting udev. Again rebooted with selinux=0 and was fine.
> >
> >    -Louis
>  dwalsh@xxxxxxxxxx wrote:
> 
> Instead of booting with selinux=0, boot with enforcing=0 and report the AVC messages. You might 
> need to relabel.
> 
> touch /.autorelabel
> reboot

I did a relabel but still having problems. This is what I get:

First I get many lines of this:

Feb  2 20:53:29 soncomputer kernel: inode_doinit_with_dentry:  context_to_sid(unlabeled) returned 22 for dev=hda3 ino=724920

with different ino #, Then this:

Feb  2 20:53:29 soncomputer kernel: audit(1138931589.627:32): avc:  denied  { search } for  pid=2095 comm="avahi-daemon" name="/" dev=hda3 ino=2 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
Feb  2 20:53:30 soncomputer kernel: audit(1138931589.627:33): avc:  denied  { search } for  pid=2095 comm="avahi-daemon" name="etc" dev=hda3 ino=650881 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
Feb  2 20:53:30 soncomputer kernel: inode_doinit_with_dentry:  context_to_sid(unlabeled) returned 22 for dev=hda3 ino=532524
Feb  2 20:53:30 soncomputer kernel: audit(1138931589.639:34): avc:  denied  { read } for  pid=2095 comm="avahi-daemon" name="libdaemon.so.0" dev=hda3 ino=532524 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file
Feb  2 20:53:30 soncomputer kernel: audit(1138931589.639:35): avc:  denied  { read } for  pid=2095 comm="avahi-daemon" name="libdaemon.so.0.2.4" dev=hda3 ino=551684 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
Feb  2 20:53:30 soncomputer kernel: audit(1138931589.651:36): avc:  denied  { getattr } for  pid=2095 comm="avahi-daemon" name="libdaemon.so.0.2.4" dev=hda3
ino=551684 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
Feb  2 20:53:30 soncomputer kernel: audit(1138931589.651:37): avc:  denied  { execute } for  pid=2095 comm="avahi-daemon" name="libdaemon.so.0.2.4" dev=hda3
ino=551684 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
Feb  2 20:53:30 soncomputer kernel: audit(1138931589.651:38): avc:  denied  { read } for  pid=2095 comm="avahi-daemon" name="libexpat.so.0" dev=hda3 ino=1627271 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=lnk_file
Feb  2 20:53:30 soncomputer kernel: audit(1138931589.671:39): avc:  denied  { read } for  pid=2097 comm="avahi-daemon" name="nsswitch.conf" dev=hda3 ino=650928 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
Feb  2 20:53:30 soncomputer kernel: audit(1138931589.671:40): avc:  denied  { getattr } for  pid=2097 comm="avahi-daemon" name="nsswitch.conf" dev=hda3 ino=650928 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
Feb  2 20:53:30 soncomputer kernel: audit(1138931589.671:41): avc:  denied  { execute } for  pid=2097 comm="avahi-daemon" name="libnss_files-2.3.90.so" dev=hda3 ino=1627241 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
Feb  2 20:53:30 soncomputer kernel: audit(1138931589.671:42): avc:  denied  { write } for  pid=2097 comm="avahi-daemon" name="log" dev=tmpfs ino=4859 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=sock_file
Feb  2 20:53:30 soncomputer kernel: audit(1138931589.671:43): avc:  denied  { sendto } for  pid=2097 comm="avahi-daemon" name="log" scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=unix_dgram_socket

And back to this
Feb  2 20:53:30 soncomputer kernel: inode_doinit_with_dentry:  context_to_sid(unlabeled) returned 22 for dev=hda3 ino=1112204

going down the log:
Feb  2 20:53:35 soncomputer kernel: audit(1138931592.367:44): avc:  denied  { write } for  pid=2097 comm="avahi-daemon" name="system_bus_socket" dev=hda3 ino=1823236 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=sock_file
Feb  2 20:53:35 soncomputer kernel: audit(1138931592.367:45): avc:  denied  { connectto } for  pid=2097 comm="avahi-daemon" name="system_bus_socket" scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=unix_stream_socket
Feb  2 20:53:35 soncomputer kernel: audit(1138931592.367:46): user pid=1843 uid=81 auid=4294967295 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=Hello dest=org.freedesktop.DBus spid=2097 scontext=system_u:system_r:avahi_t tcontext=system_u:system_r:initrc_t tclass=dbus
Feb  2 20:53:35 soncomputer kernel: : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
Feb  2 20:53:35 soncomputer kernel: audit(1138931592.371:47): user pid=1843 uid=81 auid=4294967295 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=RequestName dest=org.freedesktop.DBus spid=2097 scontext=system_u:system_r:avahi_t tcontext=system_u:system_r:initrc_t tclass=dbus
Feb  2 20:53:35 soncomputer kernel: : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
Feb  2 20:53:35 soncomputer kernel: audit(1138931592.371:48): user pid=1843 uid=81 auid=4294967295 msg='avc:  denied  { acquire_svc } for service=org.freedesktop.Avahi spid=2097 scontext=system_u:system_r:avahi_t tcontext=system_u:system_r:initrc_t tclass=dbus
Feb  2 20:53:35 soncomputer kernel: : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
Feb  2 20:53:35 soncomputer kernel: audit(1138931592.375:49): user pid=1843 uid=81 auid=4294967295 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=AddMatch dest=org.freedesktop.DBus spid=2097 scontext=system_u:system_r:avahi_t tcontext=system_u:system_r:initrc_t tclass=dbus
Feb  2 20:53:35 soncomputer kernel: : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'

.............

Feb  2 20:53:35 soncomputer kernel: input: PC Speaker as /class/input/input2
Feb  2 20:53:35 soncomputer kernel: audit(1138931598.736:50): avc:  denied  { search } for  pid=2232 comm="consoletype" name="/" dev=hda3 ino=2 scontext=system_u:system_r:consoletype_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
Feb  2 20:53:35 soncomputer kernel: audit(1138931598.736:51): avc:  denied  { search } for  pid=2232 comm="consoletype" name="etc" dev=hda3 ino=650881 scontext=system_u:system_r:consoletype_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
Feb  2 20:53:35 soncomputer kernel: audit(1138931598.736:52): avc:  denied  { read } for  pid=2232 comm="consoletype" name="libc.so.6" dev=hda3 ino=1627226 scontext=system_u:system_r:consoletype_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file
Feb  2 20:53:35 soncomputer kernel: audit(1138931598.736:53): avc:  denied  { read } for  pid=2232 comm="consoletype" name="libc-2.3.90.so" dev=hda3 ino=1629605 scontext=system_u:system_r:consoletype_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
Feb  2 20:53:35 soncomputer kernel: audit(1138931598.736:54): avc:  denied  { getattr } for  pid=2232 comm="consoletype" name="libc-2.3.90.so" dev=hda3 ino=1629605 scontext=system_u:system_r:consoletype_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
Feb  2 20:53:35 soncomputer kernel: audit(1138931598.736:55): avc:  denied  { execute } for  pid=2232 comm="consoletype" name="libc-2.3.90.so" dev=hda3 ino=1629605 scontext=system_u:system_r:consoletype_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file

..............

Feb  2 20:53:53 soncomputer kernel: audit(1138931631.126:57): avc:  denied  { search } for  pid=2472 comm="automount" name="/" dev=hda3 ino=2 scontext=system_u:system_r:automount_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir

..............

Feb  2 20:54:17 soncomputer kernel: audit(1138931657.503:58): avc:  denied  { associate } for  pid=2501 comm="su" name=".xauthMKz24i" scontext=user_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
 


-- 
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux