flood of selinux avcs, settroubleshoot all over the place(sorry for all the avcs)
Daniel J Walsh
dwalsh at redhat.com
Thu Apr 10 19:55:18 UTC 2008
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Antonio Olivares wrote:
> --- Tom London <selinux at gmail.com> wrote:
>
>> On Wed, Apr 9, 2008 at 5:52 PM, Antonio Olivares
>> <olivares14031 at yahoo.com> wrote:
>>> --- Tom London <selinux at gmail.com> wrote:
>>>
>>> > Are you running X, firefox, etc. as root?
>>> >
>>>
>>> Yes, I could not log on as normal user. I did
>> not get
>>> any while running KDE, but the apps were crashing
>> too
>>> much so I went to GNOME on that machine. Then I
>>> started seeing the AVCS just these time. Does
>> only
>>> root see AVCS now?
>>>
>>> Thanks,
>>>
>>> Antonio
>>>
>> I see no AVCs logged in as a normal user.
>>
>> In general, it is not considered a good idea to run
>> X and firefox as root.
>>
>> tom
>>
>> --
>> Tom London
>>
> I know that, but logging in as normal user and typing
> startx did not work, error reading /var/log/Xorg.0.log
> ?
>
> I had no other choice, apparently it is working now,
> *crossing my fingers*, still cannot su -
> on that machine.
>
> Thanks,
>
> Antonio
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
>
There is a bug in the selinux-policy package that you installed from.
unconfined_u is not defined.
# semanage user -a -P user -R "unconfined_r system_r" -r s0-s0:c0.c1023
unconfined_u
Should fix your problem.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkf+cKYACgkQrlYvE4MpobN0zACg32tUKOQpf1WtdkZKN1FEorYc
AqgAnjHuLY7PA8nedykJaARfVpWDIsBE
=tjRP
-----END PGP SIGNATURE-----
More information about the test
mailing list