Re: semodule

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 05/24/2009 08:40 AM, Vadym Chepkov wrote:
Hello,

I have this AVC denial when I try to load my local policy module:

time->Sun May 24 08:31:57 2009
type=SYSCALL msg=audit(1243168317.542:724332): arch=40000003 syscall=11 success=yes exit=0 a0=1056700 a1=1563f60 a2=0 a3=0 items=0 ppid=17011 pid=17266 auid=4294967295
  uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0
-s0:c0.c1023 key=(null)
type=AVC msg=audit(1243168317.542:724332): avc:  denied  { read write } for  pid=17266 comm="load_policy" name="1" dev=devpts ino=3 scontext=system_u:system_r:load_pol
icy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sshd_devpts_t:s0 tclass=chr_file

SETroubleshoot suggests setsebool -P allow_daemons_use_tty=1, but I have it on already. What gives? Thank you.

selinux-policy-targeted-3.5.13-59.fc10.noarch

Sincerely yours,
   Vadym Chepkov

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list


Setroubleshoot is mistaken. Are you ssh into a box and the running load_policy or are you running ssh remotehost load_policy?

If you ssh into a box and execute id -Z what does it show?

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux