-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Daniel J Walsh wrote: | https://bugzilla.redhat.com/show_bug.cgi?id=445709 | | libvirtd is clearly not ptracing the unconfined_t domain. It is | problably looking under /proc for some information about the app that is | communicating with it. It might be reading unconfined_t environment. I | am not sure, but we generate a ptrace and stop the app from working. My | only choice is to allow virtd to ptrace unconfined_t processes which is | not a good idea. This has to be fixes in the kernel. | | Dan The policykit developer informs me that "PolicyKit is trying to resolve the /proc/<pid>/exe link for the connecting client." - -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkgoN5EACgkQrlYvE4MpobMb1gCgj+r3ELhTfLWoPYB4RyCl8pHf fuwAoLZdyFac/547Xn75l6R4TcB5kdHZ =DzRx -----END PGP SIGNATURE----- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.