Dear all, *** fedora 7 ==> Fedora rawhide machine. booting with enforcing=0 parameter. Could not su - before, but with enforcing=0 can now. The following warning comes up. How can I fix to boot normally, Thanks, Antonio Summary: SELinux prevented X from using the terminal /dev/tty7. Detailed Description: [SELinux is in permissive mode, the operation would have been denied but was permitted due to permissive mode.] SELinux prevented X from using the terminal /dev/tty7. In most cases daemons do not need to interact with the terminal, usually these avc messages can be ignored. All of the confined daemons should have dontaudit rules around using the terminal. Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this selinux-policy. If you would like to allow all daemons to interact with the terminal, you can turn on the allow_daemons_use_tty boolean. Allowing Access: Changing the "allow_daemons_use_tty" boolean to true will allow this access: "setsebool -P allow_daemons_use_tty=1." Fix Command: setsebool -P allow_daemons_use_tty=1 Additional Information: Source Context user_u:user_r:user_t Target Context system_u:object_r:tty_device_t Target Objects /dev/tty7 [ chr_file ] Source X Source Path /usr/bin/Xorg Port <Unknown> Host localhost.localdomain Source RPM Packages xorg-x11-server-Xorg-1.4.99.901-21.20080407.fc9 Target RPM Packages Policy RPM selinux-policy-3.3.1-33.fc9 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Permissive Plugin Name allow_daemons_use_tty Host Name localhost.localdomain Platform Linux localhost.localdomain 2.6.25-0.218.rc8.git7.fc9.i686 #1 SMP Wed Apr 9 20:35:56 EDT 2008 i686 i686 Alert Count 1 First Seen Wed 16 Apr 2008 06:51:08 PM CDT Last Seen Wed 16 Apr 2008 06:51:08 PM CDT Local ID 08f38222-ea43-4584-b095-04504b198679 Line Numbers Raw Audit Messages host=localhost.localdomain type=AVC msg=audit(1208389868.367:37): avc: denied { ioctl } for pid=2431 comm="X" path="/dev/tty7" dev=tmpfs ino=237 scontext=user_u:user_r:user_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file host=localhost.localdomain type=SYSCALL msg=audit(1208389868.367:37): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=4b30 a2=640ba6 a3=51eb851f items=0 ppid=2430 pid=2431 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=tty7 ses=1 comm="X" exe="/usr/bin/Xorg" subj=user_u:user_r:user_t:s0 key=(null) ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
