Tom London wrote:
Running targeted/enforcing, latest rawhide.
dbusd on my system seems to be having problems starting:
Oct 24 06:48:20 localhost dbus-daemon: Can't send to audit system:
USER_AVC pid=2390 uid=0 loginuid=-1 message=avc: can't open netlink
socket: 13 (Permission denied)
and in audit.log:
type=AVC msg=audit(1130161700.864:93): avc: denied { create } for
pid=2390 comm="dbus-daemon"
scontext=system_u:system_r:system_dbusd_t:s0
tcontext=system_u:system_r:system_dbusd_t:s0
tclass=netlink_selinux_socket
type=SYSCALL msg=audit(1130161700.864:93): arch=40000003 syscall=102
success=no exit=-13 a0=1 a1=bfbaa750 a2=2c2248 a3=19a items=0 pid=2390
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0
fsgid=0 comm="dbus-daemon" exe="/usr/bin/dbus-daemon"
type=SOCKETCALL msg=audit(1130161700.864:93): nargs=3 a0=10 a1=3 a2=7
dbusd.te seems to want create_socket_perms (or
create_netlink_socket_perms) for self:netlink_selinux_socket
That right? Something else?
tom
--
Tom London
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Try latest policy on
ftp://people.redhat.com/dwalsh/SELinux/Fedora/selinux-policy*
--
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
