Hi Miroslav,
Miroslav Grepl wrote:
> I will fix the issue with execstack in the next release of selinux policy.
>
> F9: selinux-policy-3.3.1-119.fc9
> F10: selinux-policy-3.5.13-40.fc10
Sorry for the slow reply. I did test this on F-10 and I still get an
AVC whenever an iPod is connected:
time->Thu Jan 29 13:09:58 2009
type=SYSCALL msg=audit(1233252598.707:637): arch=40000003 syscall=125 success=no exit=-13 a0=bfe31000 a1=1000 a2=1000007 a3=fffff000 items=0 ppid=30975 pid=30978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="mono" exe="/usr/bin/mono" subj=system_u:system_r:podsleuth_t:s0 key=(null)
type=AVC msg=audit(1233252598.707:637): avc: denied { execstack } for pid=30978 comm="mono" scontext=system_u:system_r:podsleuth_t:s0 tcontext=system_u:system_r:podsleuth_t:s0 tclass=process
(I missed the window while this was in testing to add this info to
Bodhi.)
$ rpm -q selinux-policy
selinux-policy-3.5.13-40.fc10.noarch
--
Todd OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Going to trial with a lawyer who considers your whole life-style a
Crime in Progress is not a happy prospect.
-- Hunter S. Thompson
Attachment:
pgpnHPxM9Zp52.pgp
Description: PGP signature
-- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
