On 05/24/2009 08:40 AM, Vadym Chepkov wrote:
Hello,
I have this AVC denial when I try to load my local policy module:
time->Sun May 24 08:31:57 2009
type=SYSCALL msg=audit(1243168317.542:724332): arch=40000003 syscall=11 success=yes exit=0 a0=1056700 a1=1563f60 a2=0 a3=0 items=0 ppid=17011 pid=17266 auid=4294967295
uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0
-s0:c0.c1023 key=(null)
type=AVC msg=audit(1243168317.542:724332): avc: denied { read write } for pid=17266 comm="load_policy" name="1" dev=devpts ino=3 scontext=system_u:system_r:load_pol
icy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sshd_devpts_t:s0 tclass=chr_file
SETroubleshoot suggests setsebool -P allow_daemons_use_tty=1, but I have it on already. What gives? Thank you.
selinux-policy-targeted-3.5.13-59.fc10.noarch
Sincerely yours,
Vadym Chepkov
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Setroubleshoot is mistaken. Are you ssh into a box and the running
load_policy or are you running ssh remotehost load_policy?
If you ssh into a box and execute id -Z what does it show?
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
