SELinux avcs in permissive mode
Hi, folks.
I'm running Fedora Core Devel (RawHide) with SELinux enabled in
permissive mode in a Xen domain 0. After booting into runlevel 3 I see
these avcs:
audit(1145694295.644:3): avc: denied { read write } for pid=1490
comm="xenstored" name="console" dev=tmpfs ino=812
scontext=system_u:system_r:xenstored_t:s0
tcontext=system_u:object_r:console_device_t:s0 tclass=chr_file
audit(1145694295.788:4): avc: denied { read write } for pid=1493
comm="xenconsoled" name="console" dev=tmpfs ino=812
scontext=system_u:system_r:xenconsoled_t:s0
tcontext=system_u:object_r:console_device_t:s0 tclass=chr_file
audit(1145694299.076:5): SELinux: unrecognized netlink message
type=28265 for sclass=43
audit(1145694302.696:8): avc: denied { read write } for pid=1621
comm="mingetty" name="utmp" dev=dm-0 ino=1310727
scontext=system_u:system_r:getty_t:s0
tcontext=system_u:object_r:init_var_run_t:s0 tclass=file
audit(1145694302.696:9): avc: denied { lock } for pid=1621
comm="mingetty" name="utmp" dev=dm-0 ino=1310727
scontext=system_u:system_r:getty_t:s0
tcontext=system_u:object_r:init_var_run_t:s0 tclass=file
Any comments on this?
Thanks!