Currently auditd fails to start on a particular guest.
service auditd restart
Redirecting to /bin/systemctl restart auditd.service
[ 199.986682] type=1400 audit(1333285442.114:6): avc: denied {
dac_override } for pid=1409 comm="auditd" capability=1
scontext=system_u:system_r:auditd_t:s0
tcontext=system_u:system_r:auditd_t:s0 tclass=capability
[ 199.988842] type=1400 audit(1333285442.116:7): avc: denied {
dac_read_search } for pid=1409 comm="auditd" capability=2
scontext=system_u:system_r:auditd_t:s0
tcontext=system_u:system_r:auditd_t:s0 tclass=capability
Job failed. See system logs and 'systemctl status' for details.
systemctl status auditd.service
gives nothing extra to above.
--
Regards,
Frank
"Jack of all, fubars"
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux