In spite of the thread complaining about SELinux, I've actually had no
problems with it in F8. Before today, I only had 2 alerts, and they
were both due to needing to relabel, which I did a few days ago. (I
had big problems with SELinux on FC-6, which is why I initially set it
to permissive. I need to change to enforcing.) Tonight I logged in,
walked off to do some kid-tucking-into-bed, and came back to find
this:
Source Context: unconfined_u:system_r:unconfined_t:SystemLow-SystemHigh
Target Context: unconfined_u:system_r:unconfined_t:SystemLow-SystemHigh
Target Objects: None [ process ]
Affected RPM Packages:
Policy RPM: selinux-policy-3.0.8-73.fc8
Selinux Enabled: True
Policy Type: targeted
MLS Enabled: True
Enforcing Mode: Permissive
Plugin Name: plugins.allow_execheap
Host Name: localhost.localdomain
Platform: Linux localhost.localdomain 2.6.23.9-85.fc8 #1 SMP Fri Dec
7 15:49:59 EST 2007 i686 i686
Alert Count: 1
First Seen: Wed 16 Jan 2008 08:42:07 PM MST
Last Seen: Wed 16 Jan 2008 08:42:07 PM MST
Local ID: 264c0f89-91de-43d3-a095-50d6636c25d0
Line Numbers:
Raw Audit Messages :
avc: denied { execheap } for comm=gnome-settings- pid=2851
scontext=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023
tclass=process tcontext=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023
PID 2851 didn't exist by the time I was able to check for it. I
didn't find anything relevant in bugzilla. A little poking around on
my system failed to turn up anything called gnome-settings-. I'd file
a bug, but I have no idea what component this is. Anybody know?
--
Jerry James
http://loganjerry.googlepages.com/
--
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list
