Just happen to notice this running strict/enforcing:
hwbrowser produces the following avcs, and doesn't
display anything for 'Hard Drives' (sorry, got hit
with the truncated avc message...):
[Does it really need write access to fixed_device_t?]
tom
Oct 29 09:45:17 fedora kernel: audit(1099068317.291:0): avc: denied
{ write } for pid=14626 exe=/bin/bash path=pipe:[51083] dev=pipefs
ino=51083 scontext=root:sysadm_r:sysadm_t
tcontext=system_u:system_r:xdm_t tclass=fifo_file
Oct 29 09:45:17 fedora kernel: audit(1099068317.291:0): avc: denied
{ write } for pid=14626 exe=/bin/bash path=pipe:[51083] dev=pipefs
ino=51083 scontext=root:sysadm_r:sysadm_t
tcontext=system_u:system_r:xdm_t tclass=fifo_file
Oct 29 09:45:18 fedora kernel:
audit(1099068318.321:0): avc: denied {
unix_read unix_write } for pid=3299 exe=/usr/X11R6/bin/Xorg
Oct 29 09:45:19 fedora kernel: audit(1099068319.206:0): avc: denied
{ read write } for pid=14627 exe=/usr/bin/python name=hda dev=tmpfs
ino=1024 scontext=root:sysadm_r:sysadm_t
tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file
Oct 29 09:45:19 fedora kernel: audit(1099068319.208:0): avc: denied
{ read } for pid=14627 exe=/usr/bin/python name=hda dev=tmpfs
ino=1024 scontext=root:sysadm_r:sysadm_t
tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file
--
Tom London
