On 7/20/07, Tom London <selinux@xxxxxxxxx> wrote:
On 7/20/07, Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote:
> Tom London wrote:
> > A bit more info:
> >
> > Appear to get this each time a new window is to be created:
> >
> > type=AVC msg=audit(1184941619.962:41): avc: denied { associate } for
> > pid=3234 comm="gconfd-2" name="saved_state.tmp"
> > scontext=system_u:object_r:unlabeled_t:s0
> > tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
> > type=SYSCALL msg=audit(1184941619.962:41): arch=40000003 syscall=5
> > success=no exit=-13 a0=834c8a0 a1=241 a2=1c0 a3=811d230 items=0 ppid=1
> > pid=3234 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500
> > sgid=500 fsgid=500 tty=(none) comm="gconfd-2"
> > exe="/usr/libexec/gconfd-2" subj=system_u:system_r:unconfined_t:s0
> > key=(null)
> >
> > --
> > fedora-selinux-list mailing list
> > fedora-selinux-list@xxxxxxxxxx
> > https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> Problem is that gconf_t has been eliminated from policy so you have a
> process running as unlabeled_t.
>
> If you log out, make sure gconfd-2 is killed. Log back in, it should work.
>
>
I just rebooted, logged in again, and am still getting these. 'ps agxZ' shows:
[root@localhost ~]# ps agxZ | grep gconf
system_u:system_r:unconfined_t 3342 ? S 0:00
/usr/libexec/gconfd-2 6
system_u:system_r:unconfined_t 3359 ? S 0:02 compiz
--replace gconf
system_u:system_r:unconfined_t 3855 pts/0 S+ 0:00 grep gconf
[root@localhost ~]#
Last AVC:
type=AVC msg=audit(1184949297.290:45): avc: denied { associate } for
pid=3342 comm="gconfd-2" name="saved_state.tmp"
scontext=system_u:object_r:unlabeled_t:s0
tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
type=SYSCALL msg=audit(1184949297.290:45): arch=40000003 syscall=5
success=no exit=-13 a0=821f8c0 a1=241 a2=1c0 a3=81a9230 items=0 ppid=1
pid=3342 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500
sgid=500 fsgid=500 tty=(none) comm="gconfd-2"
exe="/usr/libexec/gconfd-2" subj=system_u:system_r:unconfined_t:s0
key=(null)
Did I mess something up?
OK, I think I have this fixed (thanks for the 'hint'):
Looks like ~/.gconf* needed to be relabeled.
I relabeled home directory and these seem to have gone away.
tom
--
Tom London
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
