-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Knute Johnson wrote: >> Its a mislabeled file. /var/log/btmp should be labeled faillog_t >> >> restorecon -R -v /var/log >> >> to fix up everything in /var/log. btmp is used whenever there is a >> login failure (I think only failure...) >> >> not sure how it got mislabeled (what is supposed to create it, anyone >> know? do you remember at some time untaring a bunch of files >> in /var/log? or cp'ing in files? somehow it got created without the >> 'right' label) but it is occasional because people only occasionally >> screw up logging in and you get the denial because it is mislabeled. >> Fix the label and you should be good from now on. >> >> -Eric > > Thanks, it was mislabeled. I don't know how but it's fixed now. > THere is a reported bug on logrotate I believe that is clearing the btmp file but not labeling it correctly. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkeCWjYACgkQrlYvE4MpobNxpACdHcUIw1m/CiGAklKX9BxoD4PR byYAn0/UZEXdbSlqBKUkSdumFwg01vqN =b8zk -----END PGP SIGNATURE----- -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
