On 04/21/2010 10:11 PM, Robert Nichols wrote:
> Apr 21 12:56:26 omega-3a kernel: type=1305 audit(1271872586.681:17143):
> auid=4294967295 ses=4294967295 subj=system_u:system_r:readahead_t:s0 op="remove
> rule" key=(null) list=4 res=0
>
> Apr 21 12:56:26 omega-3a kernel: type=1305 audit(1271872586.681:17144):
> audit_enabled=0 old=1 auid=4294967295 ses=4294967295
> subj=system_u:system_r:readahead_t:s0 res=1
[SNIP]
> I have no clue what might be setting audit_enabled=0 in the kernel,
> but that "remove rule" message just before makes me suspicious that
> it's SElinux related.
I take that back. SElinux is not at fault here. It looks like a race
condition in readahead. Full story here:
https://bugzilla.redhat.com/show_bug.cgi?id=584643
--
Bob Nichols "NOSPAM" is really part of my email address.
Do NOT delete it.
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux
