Stephen Smalley wrote:
On Mon, 2005-05-16 at 14:47 +0300, Emek TUZUN wrote:
What is SETSCHED fuction of MySql?
I am getting these logs but mysql works normal... What are these setsched denials?
May 16 01:39:04 xstream kernel: audit(1116243944.356:0): avc: denied
{ setsched } for pid=18216 exe=/usr/sbin/mysqld
scontext=root:system_r:mysqld_t tcontext=root:system_r:mysqld_t
tclass=process
May 16 01:39:18 xstream kernel: audit(1116243958.654:0): avc: denied
{ setsched } for pid=18228 exe=/usr/sbin/mysqld
scontext=root:system_r:mysqld_t tcontext=root:system_r:mysqld_t
tclass=process
May 16 01:39:30 xstream kernel: audit(1116243970.083:0): avc: denied
{ setsched } for pid=18229 exe=/usr/sbin/mysqld
scontext=root:system_r:mysqld_t tcontext=root:system_r:mysqld_t
tclass=process
Attempts to change priority via nice(2) or scheduling information via sched_setscheduler(2). You can get more information about the denial by enabling syscall auditing (auditctl -e 1) and running mysqld again. If mysqld is just lowering its priority, then this should be allowed in the policy.
Latest policy allows this.
--
-- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-selinux-list
