Re: avc - f15
On 07/13/2011 07:32 AM, Genes MailLists wrote:
I started getting this today:
(F15 + rawhide(3.0 kernel, procps)
Forgot to say what I was doing to trigger this:
This may be related (or may be abrt bug).
What triggered this is the following (odd because selinux is permissive).
I started chrome - chrome processes are running - but no chrome
windows appear - instead I get abrt errors in /var/log/messages (see
below) - I did killall chrome to kill off the processes which wont start
properly.
Here's what showed in messages - what seems to have happened is -
statr chome (it segv's for some reason - which is very odd) - then abrt
tried to pick up on it - get avc - and then setroubleshootd starts.
After killing the chrome processes - waiting a while - yum erase
abrt - start chrome it starts fine.
gene/
-------------- /var/log/messages -------------------
Jul 13 07:28:21 lap3 abrt[25068]: Unrecognized variable 'DumpLocation'
in '/etc/abrt/abrt.conf'
Jul 13 07:28:21 lap3 abrtd: Unrecognized variable 'DumpLocation' in
'/etc/abrt/abrt.conf'
Jul 13 07:28:21 lap3 dbus: [system] Activating service
name='org.fedoraproject.Setroubleshootd' (using servicehelper)
Jul 13 07:28:21 lap3 dbus: [system] Successfully activated service
'org.fedoraproject.Setroubleshootd'
Jul 13 07:28:22 lap3 abrt[25068]: saved core dump of pid 25026
(/opt/google/chrome/chrome) to
/var/spool/abrt/ccpp-2011-07-13-07:28:21-25026.new/coredump (63602688 bytes)
Jul 13 07:28:22 lap3 abrtd: Unrecognized variable 'DumpLocation' in
'/etc/abrt/abrt.conf'
Jul 13 07:28:22 lap3 abrtd: Directory 'ccpp-2011-07-13-07:28:21-25026'
creation detected
Jul 13 07:28:22 lap3 abrtd: Corrupted or bad dump
/var/spool/abrt/ccpp-2011-07-13-07:28:21-25026 (res:2), deleting
Jul 13 07:28:23 lap3 setroubleshoot: SELinux is preventing
/usr/libexec/abrt-hook-ccpp from using the sys_ptrace capability. For
complete SELinux messages. run sealert -l
c6a02f63-3cd3-4f33-888b-3f047027dd01
Jul 13 07:28:23 lap3 setroubleshoot: SELinux is preventing
/usr/libexec/abrt-hook-ccpp from using the dac_override capability. For
complete SELinux messages. run sealert -l
6ad9b5e6-ea7d-45ac-900f-7cac78bb5a0a
Jul 13 07:28:23 lap3 setroubleshoot: SELinux is preventing
/usr/libexec/abrt-hook-ccpp from using the dac_override capability. For
complete SELinux messages. run sealert -l
6ad9b5e6-ea7d-45ac-900f-7cac78bb5a0a
Jul 13 07:28:43 lap3 dbus: [system] Activating service
name='org.fedoraproject.Setroubleshootd' (using servicehelper)
Jul 13 07:28:43 lap3 dbus: [system] Successfully activated service
'org.fedoraproject.Setroubleshootd'