Re: more AVCs from shutdown....

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, Feb 2, 2008 at 10:43 AM, Tom London <selinux@xxxxxxxxx> wrote:
> Shutdown from gnome menu still doesn't work for me and generates an AVC:
>
>  type=AVC msg=audit(1201976243.041:34): avc:  denied  { search } for
>  pid=2470 comm="console-kit-dae" name="PolicyKit-public" dev=dm-0
>  ino=67632 scontext=system_u:system_r:consolekit_t:s0
>  tcontext=system_u:object_r:polkit_var_lib_t:s0 tclass=dir
>  type=SYSCALL msg=audit(1201976243.041:34): arch=40000003 syscall=5
>  success=no exit=-13 a0=9c28880 a1=8000 a2=0 a3=8000 items=0 ppid=1
>  pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
>  sgid=0 fsgid=0 tty=(none) comm="console-kit-dae"
>  exe="/usr/sbin/console-kit-daemon"
>  subj=system_u:system_r:consolekit_t:s0 key=(null)
>
>  and
>  [root@localhost ~]# locate PolicyKit-public
>  /var/lib/PolicyKit-public
>  [root@localhost ~]#
>
>  Setting to permissive mode and retrying, shutdown works, but generates
>  more AVC (attached):
>
>
>  #============= consolekit_t ==============
>  allow consolekit_t init_exec_t:file { read execute execute_no_trans };
>  allow consolekit_t initctl_t:fifo_file write;
>  allow consolekit_t initrc_var_run_t:file { read write lock };
>  allow consolekit_t lib_t:file execute_no_trans;
>  allow consolekit_t polkit_var_lib_t:dir search;
>  allow consolekit_t shell_exec_t:file { read execute };
>
>  #============= vmware_host_t ==============
>  allow vmware_host_t var_run_t:sock_file unlink;
>
>  [vmware AVC seems not to bother anything, btw.  dontaudit?]
>
>  --
Ooops, forgot to attach AVCs....

tom
-- 
Tom London

Attachment: log
Description: Binary data

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux