Just when I thought the selinux problems were licked, I'm now encountering problems with gpg, etc after updating with the latest version of targeted policy:
Details:
60# rpm -q -a selinux-policy-targeted selinux-policy-targeted-1.17.30-3.13 uname -a 61# uname -a Linux lucy-01 2.6.11-1.35_FC3smp #1 SMP Mon Jun 13 01:17:35 EDT 2005 i686 i686 i386 GNU/Linux 62#
/var/log/messages (duplicates pruned): Jun 27 14:08:26 lucy-01 kernel: audit(1119906506.025:0): avc: denied { execmod } for pid=5151 comm=X path=/usr/lib/tls/libnvidia-tls.so.1.0.7174 dev=sdb5 ino=220031 scontext=user_u:system_r:unconfined_t tcontext=system_u:object_r:shlib_t tclass=file Jun 27 14:08:35 lucy-01 kernel: audit(1119906515.090:0): avc: denied { execmod } for pid=5323 comm=kdeinit path=/usr/lib/libmcop.so.1.0.0 dev=sdb5 ino=214284 scontext=user_u:system_r:unconfined_t tcontext=system_u:object_r:shlib_t tclass=file Jun 27 14:08:44 lucy-01 kernel: audit(1119906524.703:0): avc: denied { execmod } for pid=5410 comm=gpg path=/usr/bin/gpg dev=sdb5 ino=67343 scontext=user_u:system_r:unconfined_t tcontext=system_u:object_r:bin_t tclass=file
Suggestions, please?
On Mon, Jun 27, 2005 at 02:48:42PM -0700, Michael W. Carney wrote:
Just when I thought the selinux problems were licked, I'm now encountering problems with gpg, etc after updating with the latest version of targeted policy:
Details:
60# rpm -q -a selinux-policy-targeted selinux-policy-targeted-1.17.30-3.13 uname -a 61# uname -a Linux lucy-01 2.6.11-1.35_FC3smp #1 SMP Mon Jun 13 01:17:35 EDT 2005 i686 i686 i386 GNU/Linux 62#
/var/log/messages (duplicates pruned): Jun 27 14:08:26 lucy-01 kernel: audit(1119906506.025:0): avc: denied { execmod } for pid=5151 comm=X path=/usr/lib/tls/libnvidia-tls.so.1.0.7174 dev=sdb5 ino=220031 scontext=user_u:system_r:unconfined_t tcontext=system_u:object_r:shlib_t tclass=file Jun 27 14:08:35 lucy-01 kernel: audit(1119906515.090:0): avc: denied { execmod } for pid=5323 comm=kdeinit path=/usr/lib/libmcop.so.1.0.0 dev=sdb5 ino=214284 scontext=user_u:system_r:unconfined_t tcontext=system_u:object_r:shlib_t tclass=file Jun 27 14:08:44 lucy-01 kernel: audit(1119906524.703:0): avc: denied { execmod } for pid=5410 comm=gpg path=/usr/bin/gpg dev=sdb5 ino=67343 scontext=user_u:system_r:unconfined_t tcontext=system_u:object_r:bin_t tclass=file
Suggestions, please?
See:
https://www.redhat.com/archives/fedora-list/2005-June/msg05248.html
and:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161834
In short: downgrade. :(
HTH, Tim
Tim Fenn wrote:
On Mon, Jun 27, 2005 at 02:48:42PM -0700, Michael W. Carney wrote:
Just when I thought the selinux problems were licked, I'm now encountering problems with gpg, etc after updating with the latest version of targeted policy:
Details:
60# rpm -q -a selinux-policy-targeted selinux-policy-targeted-1.17.30-3.13 uname -a 61# uname -a Linux lucy-01 2.6.11-1.35_FC3smp #1 SMP Mon Jun 13 01:17:35 EDT 2005 i686 i686 i386 GNU/Linux 62#
/var/log/messages (duplicates pruned): Jun 27 14:08:26 lucy-01 kernel: audit(1119906506.025:0): avc: denied { execmod } for pid=5151 comm=X path=/usr/lib/tls/libnvidia-tls.so.1.0.7174 dev=sdb5 ino=220031 scontext=user_u:system_r:unconfined_t tcontext=system_u:object_r:shlib_t tclass=file Jun 27 14:08:35 lucy-01 kernel: audit(1119906515.090:0): avc: denied { execmod } for pid=5323 comm=kdeinit path=/usr/lib/libmcop.so.1.0.0 dev=sdb5 ino=214284 scontext=user_u:system_r:unconfined_t tcontext=system_u:object_r:shlib_t tclass=file Jun 27 14:08:44 lucy-01 kernel: audit(1119906524.703:0): avc: denied { execmod } for pid=5410 comm=gpg path=/usr/bin/gpg dev=sdb5 ino=67343 scontext=user_u:system_r:unconfined_t tcontext=system_u:object_r:bin_t tclass=file
Suggestions, please?
See:
https://www.redhat.com/archives/fedora-list/2005-June/msg05248.html
and:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161834
In short: downgrade. :(
HTH, Tim
Thanks, that worked.
selinux@lists.fedoraproject.org
-
Michael W. Carney -
Tim Fenn