-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Antonio Olivares wrote: > Dear fellow selinux experts, > > Thanks to Tom London for the tip to boot the new kernel, using enforcing=0, I see some denied avc's at startup > > SELinux: initialized (dev sda3, type ext3), uses xattr > SELinux: initialized (dev tmpfs, type tmpfs), uses transition SIDs > Adding 1574328k swap on /dev/sda5. Priority:-1 extents:1 across:1574328k > Adding 1540088k swap on /dev/mapper/VolGroup00-LogVol01. Priority:-2 extents:1 across:1540088k > SELinux: initialized (dev binfmt_misc, type binfmt_misc), uses genfs_contexts > type=1400 audit(1228436635.068:4): avc: denied { sys_tty_config } for pid=1536 comm="consoletype" capability=26 scontext=system_u:system_r:consoletype_t:s0 tcontext=system_u:system_r:consoletype_t:s0 tclass=capability > NET: Registered protocol family 10 > lo: Disabled Privacy Extensions > ip6_tables: (C) 2000-2006 Netfilter Core Team > type=1400 audit(1228436636.405:5): avc: denied { write } for pid=1562 comm="ip6tables-resto" path="/0" dev=devpts ino=2 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file > eth0: no IPv6 routers present > eth1: setting full-duplex. > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > RPC: Registered udp transport module. > RPC: Registered tcp transport module. > SELinux: initialized (dev rpc_pipefs, type rpc_pipefs), uses genfs_contexts > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: initialized (dev autofs, type autofs), uses genfs_contexts > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: initialized (dev autofs, type autofs), uses genfs_contexts > SELinux: initialized (dev autofs, type autofs), uses genfs_contexts > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > Bluetooth: Core ver 2.13 > NET: Registered protocol family 31 > Bluetooth: HCI device and connection manager initialized > Bluetooth: HCI socket layer initialized > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > Bluetooth: L2CAP ver 2.11 > Bluetooth: L2CAP socket layer initialized > Bluetooth: BNEP (Ethernet Emulation) ver 1.3 > Bluetooth: BNEP filters: protocol multicast > Bridge firewalling registered > Bluetooth: SCO (Voice Link) ver 0.6 > Bluetooth: SCO socket layer initialized > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > eth1: no IPv6 routers present > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b0 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > fuse init (API version 7.10) > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: initialized (dev fuse, type fuse), uses genfs_contexts > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > type=1400 audit(1228436728.479:6): avc: denied { read open } for pid=3011 comm="kded4" name="Trolltech.conf" dev=dm-0 ino=6064321 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=user_u:object_r:user_home_t:s0 tclass=file > type=1400 audit(1228436728.500:7): avc: denied { lock } for pid=3011 comm="kded4" path="/home/olivares/.config/Trolltech.conf" dev=dm-0 ino=6064321 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=user_u:object_r:user_home_t:s0 tclass=file > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:a1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:a1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > type=1400 audit(1228436734.312:8): avc: denied { search open } for pid=3018 comm="polkit-read-aut" name="dbus" dev=dm-0 ino=3276848 scontext=system_u:system_r:polkit_auth_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=dir > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > type=1400 audit(1228436734.312:9): avc: denied { write } for pid=3018 comm="polkit-read-aut" name="system_bus_socket" dev=dm-0 ino=3276857 scontext=system_u:system_r:polkit_auth_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file > type=1400 audit(1228436734.312:10): avc: denied { connectto } for pid=3018 comm="polkit-read-aut" path="/var/run/dbus/system_bus_socket" scontext=system_u:system_r:polkit_auth_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=unix_stream_socket > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c180 > type=1400 audit(1228436738.188:11): avc: denied { write } for pid=3009 comm="klauncher" name="gkrellm.desktop" dev=dm-0 ino=6161169 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=user_u:object_r:user_home_t:s0 tclass=file > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > type=1400 audit(1228436768.597:12): avc: denied { read open } for pid=3092 comm="gkrellm" name="eth0" dev=dm-0 ino=6062973 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=user_u:object_r:user_home_t:s0 tclass=file > type=1400 audit(1228436769.217:13): avc: denied { write } for pid=3092 comm="gkrellm" name="eth0" dev=dm-0 ino=6062973 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=user_u:object_r:user_home_t:s0 tclass=file > type=1400 audit(1228436770.787:14): avc: denied { lock } for pid=3100 comm="python" path="/home/olivares/.config/Trolltech.conf" dev=dm-0 ino=6064321 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=user_u:object_r:user_home_t:s0 tclass=file > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:a1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:a1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > type=1400 audit(1228436860.935:15): avc: denied { write } for pid=3092 comm="gkrellm" name=".gkrellm2" dev=dm-0 ino=6062959 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=user_u:object_r:user_home_t:s0 tclass=dir > type=1400 audit(1228436860.935:16): avc: denied { add_name } for pid=3092 comm="gkrellm" name="user-config.new" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=user_u:object_r:user_home_t:s0 tclass=dir > type=1400 audit(1228436860.954:17): avc: denied { remove_name } for pid=3092 comm="gkrellm" name="user-config.new" dev=dm-0 ino=15368195 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=user_u:object_r:user_home_t:s0 tclass=dir > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ed > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1fd > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > type=1400 audit(1228437353.337:18): avc: denied { read open } for pid=3525 comm="bash" name=".bash_history" dev=dm-0 ino=1507343 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=root:object_r:user_home_t:s0 tclass=file > type=1400 audit(1228437402.855:19): avc: denied { read open } for pid=3488 comm="konsole" name="Trolltech.conf" dev=dm-0 ino=6064321 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=user_u:object_r:user_home_t:s0 tclass=file > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > > > [root@localhost ~]# tail -f /var/log/messages > Dec 4 18:35:48 localhost kernel: SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > Dec 4 18:35:48 localhost kernel: SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1ff > Dec 4 18:35:48 localhost kernel: SELinux: WARNING: inside open_file_mask_to_avwith unknown mode:c1ff > Dec 4 18:35:48 localhost kernel: SELinux: WARNING: inside open_file_mask_to_avwith unknown mode:c1ff > Dec 4 18:35:48 localhost kernel: SELinux: WARNING: inside open_file_mask_to_avwith unknown mode:c1ff > Dec 4 18:35:52 localhost kernel: SELinux: WARNING: inside open_file_mask_to_avwith unknown mode:c1b6 > Dec 4 18:35:53 localhost kernel: SELinux: WARNING: inside open_file_mask_to_avwith unknown mode:c1ff > Dec 4 18:35:53 localhost kernel: SELinux: WARNING: inside open_file_mask_to_avwith unknown mode:c1ff > Dec 4 18:35:53 localhost kernel: SELinux: WARNING: inside open_file_mask_to_avwith unknown mode:c1ff > Dec 4 18:35:53 localhost kernel: type=1400 audit(1228437353.337:18): avc: denied { read open } for pid=3525 comm="bash" name=".bash_history" dev=dm-0 ino=1507343 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=root:object_r:user_home_t:s0 tclass=file > > Hope this helps in some way if the policies have not been loaded. Thanks also to Mr. Dan Walsh in the troubles with iptables and selinux: > > [olivares@localhost ~]$ dmesg | grep 'iptables' > type=1400 audit(1228436636.405:5): avc: denied { write } for pid=1562 comm="ip6tables-resto" path="/0" dev=devpts ino=2 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file > > > I hope this also gets fixed to get the dhcp server going :) > > Regards, > > Antonio > > > > > -- > fedora-selinux-list mailing list > fedora-selinux-list@xxxxxxxxxx > https://www.redhat.com/mailman/listinfo/fedora-selinux-list All of these except consoletype should be in selinux-policy-3.6.1-6.fc11.noarch -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkk5OFAACgkQrlYvE4MpobNyjACg5oZkUUqCQqx1pE8Fenmehzsx 984AoNbViejgmggazD5pKxvjaE83amzX =whei -----END PGP SIGNATURE----- -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list