On Tue, Jun 15, 2010 at 09:38:47AM +0100, Frank Murphy wrote:
> from logwatch
>
> --------------------- Kernel Begin ------------------------
>
>
> WARNING: Kernel Errors Present
> type=1400 audit(1276553951.414:525): avc: denied { read append }
> for pid=2526 comm="polkit-agent-he" path="/home/user/.xsession-errors"
> dev=dm-7 ino=2 ...: 1 Time(s)
That is not enough information. You may be able to retrieve the complete avc denial with the following command:
ausearch -m avc -ts yesterday | grep polkit | grep xsession
The AVC denials have information that is required to determine what happend.
>
> ---------------------- Kernel End -------------------------
>
>
> selinux-policy-3.7.19-28.fc13.noarch (from koji)
> kernel-PAE-2.6.33.5-128.fc13.i686 (from Koji)
>
> --
> Regards,
>
> Frank Murphy
> UTF_8 Encoded
> Friend of Fedora
> --
> selinux mailing list
> selinux@xxxxxxxxxxxxxxxxxxxxxxx
> https://admin.fedoraproject.org/mailman/listinfo/selinux
Attachment:
pgpOPYig50wud.pgp
Description: PGP signature
-- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
