I'm getting the following MLS constraint violation:
node=comms type=AVC msg=audit(1227219700.656:22127): avc: denied {
use } for pid=30685 comm="getselection" path="/lib64/ld-2.8.so"
dev=dm-0 ino=8282255
scontext=user_u:user_r:user_securecp_t:s3:c0,c2,c11,c200.c511
tcontext=user_u:user_r:user_securecp_t:s0-s15:c0.c1023 tclass=fd
when execing a child process at a different level. I have code that
sets FD_CLOEXEC on all valid fds so I'm confused as to why this is
happening and what to do about it. Any ideas?
Ted
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
