Paul Lacatus wrote:
Eric Paris wrote:
What do you have in /var/log/audit/audit.log when you got the failure?
I think that a interesting part of the log is folowing. You can see
the "denied {read}" . If you need some more informations from the log
I can send you the complete log. Is only 90KB.
PL.
type=PATH msg=audit(1120937471.981:9226823): item=0
name="/etc/bluetooth/hcid.conf" inode=69410 dev=03:05 mode=0100644
ouid=0 ogid=0
rdev=00:00
type=SYSCALL msg=audit(1120937471.981:9226823): arch=40000003
syscall=5 success=no exit=-13 a0=5a4211 a1=0 a2=1b6 a3=9bd1130 items=1
pid=11886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
sgid=0 fsgid=0 comm="hcid" exe="/usr/sbin/hcid"
type=PATH msg=audit(1120937471.994:9227122): item=0
name="/etc/bluetooth/pin" inode=69411 dev=03:05 mode=0100600 ouid=0
ogid=0 rdev=0
0:00
type=SYSCALL msg=audit(1120937471.994:9227122): arch=40000003
syscall=5 success=no exit=-13 a0=9bd1018 a1=0 a2=1b6 a3=9bd2e60 items=1
pid=11886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
sgid=0 fsgid=0 comm="hcid" exe="/usr/sbin/hcid"
type=AVC msg=audit(1120937471.994:9227122): avc: denied { read }
for pid=11886 comm="hcid" name=pin dev=hda5 ino=69411 scontext=ro
ot:system_r:bluetooth_t tcontext=root:object_r:etc_t tclass=file
type=AVC msg=audit(1120937471.981:9226823): avc: denied { read }
for pid=11886 comm="hcid" name=hcid.conf dev=hda5 ino=69410 scont
ext=root:system_r:bluetooth_t tcontext=root:object_r:etc_t tclass=file
type=PATH msg=audit(1120937472.107:9227750): item=0
name="/etc/bluetooth/rfcomm.conf" inode=69413 dev=03:05 mode=0100644
ouid=0 ogid=
0 rdev=00:00
type=SYSCALL msg=audit(1120937472.107:9227750): arch=40000003
syscall=5 success=no exit=-13 a0=bfd26655 a1=0 a2=1b6 a3=8ad9008 items=
1 pid=11893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
sgid=0 fsgid=0 comm="rfcomm" exe="/usr/bin/rfcomm"
type=AVC msg=audit(1120937472.107:9227750): avc: denied { read }
for pid=11893 comm="rfcomm" name=rfcomm.conf dev=hda5 ino=69413 s
context=root:system_r:bluetooth_t tcontext=root:object_r:etc_t
tclass=file
type=AVC_PATH msg=audit(1120938151.449:14857979): path="socket:[76227]"
type=SYSCALL msg=audit(1120938151.449:14857979): arch=40000003
syscall=3 success=no exit=-13 a0=4 a1=bfc2ecc8 a2=404 a3=404 items=0 p
id=11886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
sgid=0 fsgid=0 comm="hcid" exe="/usr/sbin/hcid"
type=AVC msg=audit(1120938151.449:14857979): avc: denied { read }
for pid=11886 comm="hcid" name=[76227] dev=sockfs ino=76227 scon
text=root:system_r:bluetooth_t tcontext=root:system_r:bluetooth_t
tclass=socket
:
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
http://www.redhat.com/mailman/listinfo/fedora-selinux-list
First off you need to relabel your etc directory
restorecon -R -v /etc
Also what version of policy are you running?
rpm -q selinux-policy-targeted
--
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
http://www.redhat.com/mailman/listinfo/fedora-selinux-list
