Re: too many sealerts, most have been reported, and still see denials

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Antonio Olivares wrote:
Not exactly sure whats happening. keep in mind
if your using a development versions of fedora,
then you will run into issues.(if your on stable then
you should be fine).

I knew that ahead of time, but it did not seem to be this troublesome this time with Fedora 12.  I have been testing since Fedora 5 Test 2 release and have not encountered as many denials as I have in this Fedora 12 testing phase.  Guess many don't complain because they run selinux disabled selinux=0, or enforcing=0 so they don't care to report the issues?

depends, some people dislike SELinux, and some use it without
issues. I personally have taken a liking to using SELinux, although
sometimes do get myself in a jam, with some wrong configuration
that causes a bit of frustration.

As for the latest fedora(haven't tried 12) thought the system was
very well built.
As for the avc's being generated, tough to say
As of now I'm running the latest policy, with a custom
built system(LFS).
One thing for sure, is if  I move to a newer system
there will be issues with gnome and the latest refpolicy
due to the heavy development with refpolicy, and gnome.

Have you tried using a different policy other than what
fedora has?

I don't know much about this :(, I am just using default Fedora policies.  I guess I just need to be patient and let things work out one by one.  When I get more pops and alerts, I should post here and to bugzilla and hope that the illness' are cured :)

Regards,

Antonio




That's fine.
Sometimes these avc's might be being generated
by a mislabel somewhere. If you can try and locate
the location of what is being fired off(the avc denial should show you)
then use:
restorecon -R /tosomedir
and see if this fixes your issue.
if not try the #selinux irc list to see if somebody can help
or the SELinux mailing lists(but keep in mind it is the weekend
and those guys are normally off of work).

And also don't worry, Ill try and help you out as much as
I can.(doing a git bisect so I have plenty of time).

Justin P. Mattock

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux