Re: new SELinux error
On 03/27/2014 08:27 PM, Ed Greshko wrote:
>> What was the AVC that you got?
>> >> On 03/27/2014 04:58 PM, Paul Cartwright wrote:
> > Not sure exactly how to check. /var/log/secure has lots of entries.. I
> > didn't write down the error message and the window is gone. where do I
> > look ?
> >
The AVC would be found in /var/log/audit/audit.log
wow, my audit log was rolling over every day, these errors were coming
every second:
8 ses=4294967295 subj=system_u:system_r:httpd_t:s0 pid=17492
comm="httpd" reason="memory violation" sig=11
type=ANOM_ABEND msg=audit(1395999598.328:13458541): auid=4294967295
uid=48 gid=48 ses=4294967295 subj=system_u:system_r:httpd_t:s0 pid=17493
comm="httpd" reason="memory violation" sig=11
type=ANOM_ABEND msg=audit(1395999598.330:13458542): auid=4294967295
uid=48 gid=48 ses=4294967295 subj=system_u:system_r:httpd_t:s0 pid=17494
comm="httpd" reason="memory violation" sig=11
type=SERVICE_START msg=audit(1395999600.137:13458543): pid=1 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='
comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=?
terminal=?
res=success'
type=SERVICE_STOP msg=audit(1395999600.137:13458544): pid=1 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='
comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=?
terminal=?
res=success'
I shut down my web server & they stopped.
--
Paul Cartwright
Registered Linux User #367800 and new counter #561587