Running targeted/enforcing, latest rawhide.
I get these with 'restorecon -v -R /etc':
restorecon reset /etc/avahi/etc/localtime context
system_u:object_r:locale_t->system_u:object_r:etc_t
restorecon reset /etc/blkid.tab context
user_u:object_r:etc_t->system_u:object_r:etc_runtime_t
First, I believe the avahi chroots to /etc/avahi, so shouldn't its
'local copy' of localtime be locale_t?
Second, checking /var/log/messages, I get:
Jan 26 06:50:41 localhost kernel: audit(1138286986.121:2): avc:
denied { write } for pid=1554 comm="mount" name="blkid.tab" dev=dm-0
ino=1275806 scontext=system_u:system_r:mount_t:s0
tcontext=user_u:object_r:etc_t:s0 tclass=file
Jan 26 06:50:41 localhost kernel: floppy0: no floppy controllers found
Jan 26 06:50:41 localhost kernel: audit(1138286987.665:3): avc:
denied { write } for pid=1602 comm="swapon" name="blkid.tab"
dev=dm-0 ino=1275806 scontext=system_u:system_r:fsadm_t:s0
tcontext=user_u:object_r:etc_t:s0 tclass=file
Jan 26 06:50:41 localhost kernel: Adding 1048568k swap on
/dev/VolGroup00/LogVol01. Priority:-1 extents:1 across:1048568k
So it looks like blkid.tab's type is getting (periodically) wedged.
I'm guessing this occurs when I do a 'mount' (manual) or insert a usb
drive of some sort.
More needed here to figure out?
tom
--
Tom London
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
