On Mon, 2005-05-16 at 14:47 +0300, Emek TUZUN wrote: > What is SETSCHED fuction of MySql? > > I am getting these logs but mysql works normal... What are these > setsched denials? > > May 16 01:39:04 xstream kernel: audit(1116243944.356:0): avc: denied > { setsched } for pid=18216 exe=/usr/sbin/mysqld > scontext=root:system_r:mysqld_t tcontext=root:system_r:mysqld_t > tclass=process > May 16 01:39:18 xstream kernel: audit(1116243958.654:0): avc: denied > { setsched } for pid=18228 exe=/usr/sbin/mysqld > scontext=root:system_r:mysqld_t tcontext=root:system_r:mysqld_t > tclass=process > May 16 01:39:30 xstream kernel: audit(1116243970.083:0): avc: denied > { setsched } for pid=18229 exe=/usr/sbin/mysqld > scontext=root:system_r:mysqld_t tcontext=root:system_r:mysqld_t > tclass=process Attempts to change priority via nice(2) or scheduling information via sched_setscheduler(2). You can get more information about the denial by enabling syscall auditing (auditctl -e 1) and running mysqld again. If mysqld is just lowering its priority, then this should be allowed in the policy. -- Stephen Smalley National Security Agency -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-selinux-list