-----BEGIN PGP SIGNED MESSAGE-----
On 07/31/2013 12:01 PM, Radha Venkatesh (radvenka) wrote:
Any input on the below question?
*From:*Radha Venkatesh (radvenka) *Sent:* Tuesday, July 30, 2013 4:12 PM
*To:* fedora-selinux-list(a)redhat.com; selinux(a)lists.fedoraproject.org *Cc:*
ipc-selinux-dev(mailer list); Prakash Mishra -X (prakasmi - INFOSYS
TECHNOLOGIES LIMITED at Cisco) *Subject:* Unable to modify a file in
enforcing mode, but no denials seen even after semodule -DB
We have a strange issue showing up in our system. We are trying to modify
a configuration file - we are unable to in enforcing mode but are able to
in permissive mode. There are no denials seen.
We have run semodule –DB, to get to the hidden denials, but to no avail.
Could you give us some pointers on how to get to the bottom of this?
-- selinux mailing list selinux(a)lists.fedoraproject.org
The only time I have seen stuff like this is when you have an SELinux aware
application that is not logging properly.
I would look for user_avc or selinux_err
ausearch -m avc,user_avc,selinux_err
Also is there any clue in any of the logging information?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
-----END PGP SIGNATURE-----