On Mon, 2006-02-06 at 15:00 -0500, Matthew Saltzman wrote: > On Sun, 5 Feb 2006, Bob Kashani wrote: > > > On Sat, 2006-02-04 at 23:35 -0500, Matthew Saltzman wrote: > >> After installing kernel-2.6.15-1.1830_FC4 (or any of the 2.6.15 kernels), > >> I get the following on startup. Startup appears to complete normally and > >> the system seems functional (at least for what I've tried so far). > >> > >> audit(1139113698.796:2): avc: denied { search } for pid=578 > >> comm="hotplug" name="proc" dev=dm-0 ino=851969 > >> scontext=system_u:system_r:hotplug_t > >> tcontext=system_u:object_r:unlabeled_t tclass=dir > > > > Matt, what's the context of /etc/hotplug and /sbin/hotplug? I have this: > > > > drwxr-xr-x root root > > system_u:object_r:hotplug_etc_t /etc/hotplug > > drwxr-xr-x root root > > system_u:object_r:etc_t /etc/hotplug.d > > -rwxr-xr-x root root > > system_u:object_r:hotplug_exec_t /sbin/hotplug > > > > Try /sbin/restorecon -R /etc/hotplug* /sbin/hotplug > > $ ls -dZ /etc/hotplug.* /sbin/hotplug > drwxr-xr-x root root system_u:object_r:etc_t /etc/hotplug.d > drwxr-xr-x root root system_u:object_r:hotplug_etc_t /etc/hotplug > -rwxr-xr-x root root system_u:object_r:hotplug_exec_t /sbin/hotplug > > After the restorecon, mine are the same as yours. The startup messages > are nto affected. > > BTW, I get the same startup messages in 2.6.14 FC4 kernels if I boot in > non-quiet mode. > > I filed a bug against the kernel as requested by Stephen Smalley. Try doing a full relabel to verify that everything is labeled correctly: touch /.autorelabel reboot Bob -- Bob Kashani GARNOME Project http://www.gnome.org/projects/garnome -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list