1. When I boot to a desktop as user_t, then open a terminal, and execute 'su' to login as root, a file is created in the /root directory called .xauth0SiF7t. That produces the following AVC:
type=AVC msg=audit(1274122005.740:4): avc: denied { create } for pid=4410 comm="su" name=".xauth0SiF7t" scontext=user_u:user_r:user_su_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=file
Audit2allow generates the an allow rule but tells me it is a constraint violation.
allow user_su_t default_t:file create;
Any insights into why this is happening / what I should do to fix it?
2. Note, I'm still also getting this AVC during system boot, for which audit2allow also generates a rule which is a constraint violation:
type=AVC msg=audit(1274121983.953:3): avc: denied { relablefrom } for pid=4335 comm="restorecond" name=".xsession-errors" dev=sda3 ino=127759 scontext=user_u:user_r:user_t:s0 tcontext=system_u:object_r:xauth_home_t:s0 tclass=file
Any insights into why this is happening / what I should do to fix it?
