>There is no avc messages or anything useful.
OK here's what I pulled from the audit log:
event={'msg_type'=KERNEL 'seq'=0 'len'=222
'message'='audit(1103922269.990:3027786): avc: denied { entrypoint } for
pid=3176 exe=/usr/bin/gdm-binary path=/etc/X11/xdm/Xsession dev=hda2 ino=214827
scontext=user_u:system_r:httpd_t tcontext=system_u:object_r:etc_t tclass=file' }
event={'msg_type'=KERNEL 'seq'=0 'len'=87
'message'='audit(1103922269.990:3027786): item=0 name=/etc/X11/xdm/Xsession
inode=214827 dev=00:00gdm-binary path=/etc/X11/xdm/Xsession dev=hda2 ino=214827
scontext=user_u:system_r:httpd_t tcontext=system_u:object_r:etc_t tclass=file' }
I'm wondering where the httpd_t comes from? I've relabeled the system a couple of
times. BTW, cups is just scrolling avc denied messages:
event={'msg_type'=KERNEL 'seq'=0 'len'=194
'message'='audit(1103922414.543:809779): avc: denied { unlink } for pid=1849
exe=/usr/sbin/cupsd name=0 dev=hda2 ino=212999 scontext=user_u:system_r:cupsd_t
tcontext=system_u:object_r:file_t tclass=file' }
-Steve Grubb
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com