drago01 wrote: > On Fri, Oct 3, 2008 at 3:11 PM, Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote: >> Antonio Olivares wrote: >>> >>> --- On Thu, 10/2/08, Antonio Olivares <olivares14031@xxxxxxxxx> wrote: >>> >>>> From: Antonio Olivares <olivares14031@xxxxxxxxx> >>>> Subject: npviever on rawhide: denied avcs >>>> To: fedora-selinux-list@xxxxxxxxxx >>>> Cc: fedora-test-list@xxxxxxxxxx >>>> Date: Thursday, October 2, 2008, 5:21 PM >>>> Dear all, >>>> >>>> Doing a dmesg I see some denied avcs for npviewer >>>> >>>> I will attach the file, I have not seen setroubleshoot >>>> kick in to warn me about these avcs. Has anyone else seen >>>> these? >>>> >>>> Thanks, >>>> >>>> Antonio >>>> >>>> >>>> -- >>>> fedora-test-list mailing list >>>> fedora-test-list@xxxxxxxxxx >>>> To unsubscribe: >>>> https://www.redhat.com/mailman/listinfo/fedora-test-list >>> Messages were not attached, file too big :( >>> >>> Here's preview :) >>> >>> type=1400 audit(1222991578.902:1308): avc: denied { search } for pid=17937 comm="npviewer.bin" name="dbus" dev=dm-0 ino=3276847 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=dir >>> type=1400 audit(1222991578.902:1309): avc: denied { create } for pid=17937 comm="npviewer.bin" scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tclass=unix_dgram_socket >>> type=1400 audit(1222991578.903:1310): avc: denied { create } for pid=17937 comm="npviewer.bin" scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tclass=unix_dgram_socket >>> type=1400 audit(1222991578.922:1311): avc: denied { search } for pid=17937 comm="npviewer.bin" name="dbus" dev=dm-0 ino=3276847 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=dir >>> >>> >>> Thanks, >>> >>> Antonio >>> >>> >>> >>> >> Looks like npviewer is becoming dbus aware. I will allow it to connect >> to the dbus server, but I am not sure what service it is trying to >> communicate with. > > the packagekit plugin tryes to connect to daemon? > Is it possible to run this plugin outside of nsplugin? -- fedora-test-list mailing list fedora-test-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-test-list
