Re: Ye olde "avc granted"

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/26/2013 03:12 PM, m.roth@xxxxxxxxx wrote:
> Daniel J Walsh wrote:
>> On 03/26/2013 03:08 PM, m.roth@xxxxxxxxx wrote:
>>> Hi, folks,
>>> 
>>> Got a server that's throwing a ton of avc granted, all related to 
>>> Matlab. I saw something via google from '06, for a java thing - is
> there something
>>> I can use to shut this up?
>>> 
>>> CentOS 5.9, current.
>>> 
>> Ask on the audit list, I am not sure there is anything you can do.
>> 
>> What do the AVC's look like?
> 
> type=AVC msg=audit(1364322744.335:646078): avc:  granted  { execheap } for 
> pid=22581 comm="MATLAB" scontext=user_u:system_r:unconfined_t:s0 
> tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> 
> mark
> 
> -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx 
> https://admin.fedoraproject.org/mailman/listinfo/selinux
> 
Ah this is an old selinux-policy thing, to tell you that you have
allow_execheap boolean turned on and apps are using execheap.

Probably should turn this off, in policy.

Only way to turn it off is to turn off the boolean which will pribably break
MATLAB.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlFR9XwACgkQrlYvE4MpobPw8QCfaMsTpg6rTIy23OcbNIusl6oy
Q1kAn2DkB7NZbS+3rmVXcOyw/QisYeGW
=ae08
-----END PGP SIGNATURE-----
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux





[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux