Running strict/enforcing, and running Rawhide (selinux-policy-strict-1.15.11-1 and kernel-2.6.7-1.509), some new AVCs logged. [Sorry if I'm 'amid updates']
tom
First, early in boot sequence:
Aug 5 06:58:02 fedora autofs: automount startup succeeded
Aug 5 06:58:02 fedora kernel: SELinux: initialized (dev rootfs, type rootfs), uses genfs_contexts
Aug 5 06:58:02 fedora kernel: SELinux: initialized (dev sysfs, type sysfs), uses genfs_contexts
Aug 5 06:58:02 fedora kernel: audit(1091689038.197:0): avc: denied { read write } for pid=1 exe=/sbin/init path=/dev/console dev=rootfs ino=5 scontext=system_u:system_r:init_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file
Aug 5 06:58:02 fedora last message repeated 2 times
Aug 5 06:58:02 fedora smartd[2124]: smartd version 5.30 Copyright (C) 2002-4 Bruce Allen
Aug 5 06:58:02 fedora kernel: audit(1091689038.318:0): avc: denied { read } for pid=1 exe=/sbin/init path=/init dev=rootfs ino=14 scontext=system_u:system_r:init_t tcontext=system_u:object_r:unlabeled_t tclass=file
then, many, many like these (approx. 64 of them):
Aug 5 06:58:02 fedora kernel: audit(1091689040.452:0): avc: denied { dac_read_search } for pid=397 exe=/bin/bash capability=2 scontext=system_u:system_r:udev_t tcontext=system_u:system_r:udev_t tclass=capability
Aug 5 06:58:02 fedora smartd[2124]: Configuration file /etc/smartd.conf parsed.
Aug 5 06:58:02 fedora kernel: audit(1091689040.452:0): avc: denied { dac_read_search } for pid=411 exe=/bin/bash capability=2 scontext=system_u:system_r:udev_t tcontext=system_u:system_r:udev_t tclass=capability
Aug 5 06:58:02 fedora smartd[2124]: Device: /dev/hda, opened
Aug 5 06:58:02 fedora kernel: audit(1091689040.452:0): avc: denied { dac_read_search } for pid=399 exe=/bin/bash capability=2 scontext=system_u:system_r:udev_t tcontext=system_u:system_r:udev_t tclass=capability
Aug 5 06:58:03 fedora smartd[2124]: Device: /dev/hda, found in smartd database.
Aug 5 06:58:03 fedora kernel: audit(1091689040.452:0): avc: denied { dac_read_search } for pid=391 exe=/bin/bash capability=2 scontext=system_u:system_r:udev_t tcontext=system_u:system_r:udev_t tclass=capability
Aug 5 06:58:03 fedora kernel: audit(1091689040.453:0): avc: denied { dac_read_search } for pid=398 exe=/bin/bash capability=2 scontext=system_u:system_r:udev_t tcontext=system_u:system_r:udev_t tclass=capability
Aug 5 06:58:03 fedora kernel: audit(1091689040.453:0): avc: denied { dac_read_search } for pid=413 exe=/bin/bash capability=2 scontext=system_u:system_r:udev_t tcontext=system_u:system_r:udev_t tclass=capability
.....
Repeat of above while bringing up USB:
Aug 5 06:58:07 fedora kernel: hub 1-0:1.0: 6 ports detected
Aug 5 06:58:07 fedora kernel: audit(1091714243.675:0): avc: denied { dac_read_search } for pid=775 exe=/bin/bash capability=2 scontext=system_u:system_r:udev_t tcontext=system_u:system_r:udev_t tclass=capability
Aug 5 06:58:07 fedora kernel: ACPI: PCI interrupt 0000:00:03.0[A] -> GSI 5 (level, low) -> IRQ 5
Aug 5 06:58:07 fedora kernel: ohci_hcd 0000:00:03.0: OHCI Host Controller
Aug 5 06:58:07 fedora kernel: ohci_hcd 0000:00:03.0: irq 5, pci mem 30848000
Aug 5 06:58:07 fedora kernel: hub 1-0:1.0: over-current change on port 3
Aug 5 06:58:07 fedora kernel: ohci_hcd 0000:00:03.0: new USB bus registered, assigned bus number 2
Aug 5 06:58:07 fedora kernel: hub 2-0:1.0: USB hub found
Aug 5 06:58:07 fedora kernel: hub 2-0:1.0: 2 ports detected
Aug 5 06:58:07 fedora kernel: audit(1091714244.021:0): avc: denied { dac_read_search } for pid=809 exe=/bin/bash capability=2 scontext=system_u:system_r:udev_t tcontext=system_u:system_r:udev_t tclass=capability
Aug 5 06:58:07 fedora kernel: audit(1091714244.036:0): avc: denied { dac_read_search } for pid=813 exe=/bin/bash capability=2 scontext=system_u:system_r:udev_t tcontext=system_u:system_r:udev_t tclass=capability
Aug 5 06:58:07 fedora kernel: ACPI: PCI interrupt 0000:00:03.1[B] -> GSI 11 (level, low) -> IRQ 11
This one also seems new....:
Aug 5 06:58:07 fedora kernel: SELinux: initialized (dev tmpfs, type tmpfs), uses transition SIDs
Aug 5 06:58:07 fedora kernel: audit(1091714256.876:0): avc: denied { search } for pid=1476 exe=/sbin/pam_console_apply name=console dev=hda2 ino=4456494 scontext=system_u:system_r:pam_console_t tcontext=system_u:object_r:xdm_var_run_t tclass=dir
Finally, some like this
Aug 5 06:59:19 fedora udev[3632]: creating device node '/dev/mixer'
Aug 5 06:59:19 fedora kernel: audit(1091714359.597:0): avc: denied { dac_read_search } for pid=3642 exe=/bin/bash capability=2 scontext=system_u:system_r:udev_t tcontext=system_u:system_r:udev_t tclass=capability
Aug 5 06:59:19 fedora kernel: audit(1091714359.607:0): avc: denied { dac_read_search } for pid=3644 exe=/bin/bash capability=2 scontext=system_u:system_r:udev_t tcontext=system_u:system_r:udev_t tclass=capability
Aug 5 06:59:19 fedora kernel: audit(1091714359.611:0): avc: denied { read write } for pid=3646 exe=/sbin/restorecon path=socket:[1168] dev=sockfs ino=1168 scontext=system_u:system_r:restorecon_t tcontext=system_u:system_r:udev_t tclass=unix_dgram_socket
Aug 5 06:59:19 fedora kernel: audit(1091714359.611:0): avc: denied { read write } for pid=3646 exe=/sbin/restorecon path=socket:[1225] dev=sockfs ino=1225 scontext=system_u:system_r:restorecon_t tcontext=system_u:system_r:udev_t tclass=unix_dgram_socket
Aug 5 06:59:19 fedora kernel: audit(1091714359.614:0): avc: denied { search } for pid=2754 exe=/usr/bin/dbus-daemon-1 name=console dev=hda2 ino=4456494 scontext=system_u:system_r:dbusd_t tcontext=system_u:object_r:xdm_var_run_t tclass=dir
