On Sun, 2013-09-22 at 13:30 +0800, bigclouds wrote: > hi,all > if i disable selinux at the moment, does this error matter? > > type=VIRT_CONTROL msg=audit(1379823101.861:1278): user pid=3007 uid=0 auid=0 ses=15 msg='virt=kvm op=start reason=booted vm="testname-1" uuid=24f7e975-9aa5-4a14-b0f0-590add14c8b5 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' > No. The audit event type is not related to SELinux. This is libvirt sending messages to the audit system. > libvirtd can not start vm, but i can start throught command line which is getten from libvirtd.log. You should look at the log files in /var/log/libvirt/qemu you see if there are any messages related to this Strange thing is that your "VIRT_CONTROL" events look different from the ones on my system: > type=VIRT_CONTROL msg=audit(09/20/2013 21:03:30.497:723) : pid=3085 uid=root auid=unset ses=unset subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm=debian1 uuid=bc8b5b74-3f96-9c49-5a89-0e27d2d7752d vm-pid=-1 exe=/usr/sbin/libvirtd hostname=? addr=? terminal=? res=failed' You seem to have no "subj=" > > -- > selinux mailing list > selinux@xxxxxxxxxxxxxxxxxxxxxxx > https://admin.fedoraproject.org/mailman/listinfo/selinux -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux