Also, when I try to run up2date from Gnome (started as user1) by clicking
on the toolbar icon -> then clicking on 'Open up2date', then putting in
root password in resulting dialog box, nothing happens after that
[user1@hoho2 user1]$ dmesg | tail -2 ...
audit(1084213893.132:0): avc: denied { name_bind } for pid=3830
exe=/usr/X11R6/bin/Xorg scontext=user_u:user_r:user_xserver_t
tcontext=system_u:object_r:vnc_port_t tclass=tcp_socket
audit(1084213926.790:0): avc: denied { transition } for pid=3991
exe=/usr/sbin/userhelper path=/usr/sbin/up2date dev=sda2 ino=3845328
scontext=user_u:user_r:user_userhelper_t tcontext=root:sysadm_r:rpm_t
tclass=process
[user1@hoho2 user1]$
However, if I open a terminal window and do 'setenforce 0', and then repeat
the above commands, the up2date splash opens and I can then go ahead and
download updates (if there are any).
It looks like the policy needs a tweek here, or maybe the problem is in Gnome?
BobG
