Justin Conover wrote:
On 1/23/06, *Justin Conover* <justin.conover@xxxxxxxxx
<mailto:justin.conover@xxxxxxxxx>> wrote:
On 1/23/06, *Justin Conover* < justin.conover@xxxxxxxxx
<mailto:justin.conover@xxxxxxxxx>> wrote:
On 1/23/06, *Daniel J Walsh* < dwalsh@xxxxxxxxxx
<mailto:dwalsh@xxxxxxxxxx>> wrote:
Justin Conover wrote:
>
>
> On 1/23/06, *Daniel J Walsh* <dwalsh@xxxxxxxxxx
<mailto:dwalsh@xxxxxxxxxx>
> <mailto: dwalsh@xxxxxxxxxx <mailto:dwalsh@xxxxxxxxxx>>>
wrote:
>
> Roger Grosswiler wrote:
> > this is after todays update:
> >
> >
> > allow hald_t automount_tmp_t:dir getattr;
> > allow hald_t boot_t:dir getattr;
> > allow hald_t home_root_t:dir search;
> > allow hald_t initctl_t:fifo_file write;
> > allow hald_t initrc_var_run_t:file lock;
> > allow hald_t mnt_t:dir read;
> > allow hald_t mnt_t:file write;
> > allow hald_t sysctl_fs_t:dir search;
> > allow hald_t usr_t:file execute;
> > allow hald_t var_lib_nfs_t:dir search;
> >
> >
> > ...and again if selinux==enforced then no g-p-m
> >
> > Rog
> >
> >
> What version of policy are you running?
>
> Latest version is supposed to allow hald to have full
control over
> mnt.
> The usr_t:file execute sounds like a mislabled file
which should have
> been fixed by the latest policy also.
>
>
> --
> fedora-test-list mailing list
> fedora-test-list@xxxxxxxxxx
<mailto:fedora-test-list@xxxxxxxxxx>
<mailto:fedora-test-list@xxxxxxxxxx
<mailto:fedora-test-list@xxxxxxxxxx>>
> To unsubscribe:
> https://www.redhat.com/mailman/listinfo/fedora-test-list
>
>
>
> rpm -qa *\policy\*
> selinux-policy-targeted-2.2.2-1
> selinux-policy-2.2.2-1
> policycoreutils-1.29.9-2
>
> Same problem.
Please attach the audit.log that caused these messages.
--
fedora-test-list mailing list
fedora-test-list@xxxxxxxxxx
<mailto:fedora-test-list@xxxxxxxxxx>
To unsubscribe:
https://www.redhat.com/mailman/listinfo/fedora-test-list
justin@kainos:~$ gnome-power-manager
** (gnome-power-manager:23679): WARNING **: main: An SELinux
policy prevents this sender from sending this message to this
recipient (rejected message had interface "
org.freedesktop.DBus" member "Hello" error name "(unset)"
destination "org.freedesktop.DBus")
** ERROR **: This program cannot start until you start the
dbussystem daemon
This is usually started in initscripts, and is usually called
messagebus
It is STRONGLY recommended you reboot your compterafter
restarting messagebus
aborting...
(gnome_segv:23680): Gtk-WARNING **: Theme directory
16x16/status16x16/stock/chart of theme gnome has no size field
(gdb) bt
#0 0x007eab89 in g_logv () from /usr/lib/libglib-2.0.so.0
#1 0x007eae47 in g_log () from /usr/lib/libglib-2.0.so.0
#2 0x0804eb8a in ?? ()
#3 0x006696b4 in __libc_start_main () from /lib/libc.so.6
#4 0x0804c0d1 in ?? ()
[root@kainos ~]# gnome-power-manager
** (gnome-power-manager:2894): WARNING **: main: Unable to determine
the address of the message bus
** ERROR **: This program cannot start until you start the dbus
session daemon
This is usually started in X or gnome startup (depending on distro)
You can launch the session dbus-daemon manually with this command:
eval `dbus-launch --auto-syntax`
aborting...
(gnome_segv:2897): Gtk-WARNING **: Theme directory
16x16/status16x16/stock/chart of theme gnome has no size field
[root@kainos ~]# /etc/init.d/haldaemon status
hald (pid 2480) is running...
[root@kainos audit]# grep pid=2480 audit.log
type=USER_AVC msg=audit(1138046588.888:70): user pid=2449 uid=81
auid=4294967295 msg='avc: denied { acquire_svc } for service=
org.freedesktop.Hal spid=2480 scontext=system_u:system_r:hald_t
tcontext=system_u:system_r:initrc_t tclass=dbus : exe="?" (sauid=81,
hostname=?, addr=?, terminal=?)'
Fixed in selinux-policy-targeted-2.2.5-1 available on
ftp://people.redhat.com/dwalsh/SELinux/Fedora
Or from rawhide tomorrow.
--
fedora-test-list mailing list
fedora-test-list@xxxxxxxxxx
To unsubscribe:
https://www.redhat.com/mailman/listinfo/fedora-test-list