Greetings;
Touring the system investigating selinux alerts naming the Console*-daemon, it came to my attention that I had the start-stop links for ConsoleKit, LISa, and fglrx laying around, but that there were no corresponding files at the other end of the link in ../init.d. So I nuked them. Inspecting the ConsoleKit packages seems to indicate those files are not now part of the system. However, it was strange in that I could not rm them by typing the names, but had to copy paste the names into the command line. That seemed odd, but on further inspection with htop, the 50+ copies of ConsoleKit normally running on my F8 system are also on the missing list.
Is this something I need to fix ASAP? According to yumex, all the ConsoleKit stuff is installed. Looking at SEadmin, the consolekit policy module is version 1.2.0.
Rights on the console-kit-daemon are: root@coyote ~]# ls -la --context /usr/sbin/console-kit-daemon -rwxr-xr-x root root system_u:object_r:consolekit_exec_t:s0 /usr/sbin/console-kit-daemon
Selinuxtroubleshooter says I should do a restorecon -v './console-kit-daemon', but it returns silently and changes nothing.
Things are sort of working, and I will post other messages about a couple of miss-fires I'm found so far, so they are in separate threads.
Thanks.
On Fri, 2009-02-27 at 17:23 -0500, Gene Heskett wrote:
Greetings;
Touring the system investigating selinux alerts naming the Console*-daemon, it came to my attention that I had the start-stop links for ConsoleKit, LISa, and fglrx laying around, but that there were no corresponding files at the other end of the link in ../init.d. So I nuked them. Inspecting the ConsoleKit packages seems to indicate those files are not now part of the system. However, it was strange in that I could not rm them by typing the names, but had to copy paste the names into the command line.
What do you mean by "I could not rm them by typing the names, but had to copy paste the names into the command line"?
That seemed odd, but on further inspection with htop, the 50+ copies of ConsoleKit normally running on my F8 system are also on the missing list.
Is this something I need to fix ASAP? According to yumex, all the ConsoleKit stuff is installed. Looking at SEadmin, the consolekit policy module is version 1.2.0.
Use "rpm -V <package>" to verify the installation of <package>.
poc
On Friday 27 February 2009, Patrick O'Callaghan wrote:
On Fri, 2009-02-27 at 17:23 -0500, Gene Heskett wrote:
Greetings;
Touring the system investigating selinux alerts naming the Console*-daemon, it came to my attention that I had the start-stop links for ConsoleKit, LISa, and fglrx laying around, but that there were no corresponding files at the other end of the link in ../init.d. So I nuked them. Inspecting the ConsoleKit packages seems to indicate those files are not now part of the system. However, it was strange in that I could not rm them by typing the names, but had to copy paste the names into the command line.
What do you mean by "I could not rm them by typing the names, but had to copy paste the names into the command line"?
Exactly that, I was looking at the name as shown by ls, and typing it exactly & got a "file not found", but a copy/paste from that ls listing and it worked. Oddly, in both cases the K or S in the link name was lower case, in both my typing, and in the copy/paste echo displayed. Strange...
That seemed odd, but on further inspection with htop, the 50+ copies of ConsoleKit normally running on my F8 system are also on the missing list.
Is this something I need to fix ASAP? According to yumex, all the ConsoleKit stuff is installed. Looking at SEadmin, the consolekit policy module is version 1.2.0.
Use "rpm -V <package>" to verify the installation of <package>.
Hmm: [root@coyote sbin]# rpm -V ConsoleKit [root@coyote sbin]# rpm -q ConsoleKit ConsoleKit-0.3.0-2.fc10.i386
And to cover all the bases: [root@coyote sbin]# rpm -V `rpm -q ConsoleKit` [root@coyote sbin]#
Now, the fedora kernel disabled selinux, and I just did a touch /.autorelabel before I rebooted last, and went to work on some furniture for the hour plus that takes since there is nearly 2TB of drives here.
poc
Thanks Patrick.
On Friday 27 February 2009, Kevin Kofler wrote:
Gene Heskett wrote:
LISa
This one is definitely dead, it's a service which used to be provided by KDE 3 for network browsing, it got dropped from KDE 4.
Kevin Kofler
So go find and nuke its remains then. Ok.
Thanks Kevin.
On Fri, 2009-02-27 at 21:28 -0500, Gene Heskett wrote:
I was looking at the name as shown by ls, and typing it exactly & got a "file not found", but a copy/paste from that ls listing and it worked.
I tend to use tab-completion for that sort of thing - type a few characters from the start of the filename, hit tab.
On Friday 27 February 2009, Tim wrote:
On Fri, 2009-02-27 at 21:28 -0500, Gene Heskett wrote:
I was looking at the name as shown by ls, and typing it exactly & got a "file not found", but a copy/paste from that ls listing and it worked.
I tend to use tab-completion for that sort of thing - type a few characters from the start of the filename, hit tab.
I tied that for the 2nd attempt to delete them, tab completion wasn't working for those. It is now and did work fine before I did that. I'd scratch my head a little harder, but at 74, the hair is not only gray, but is pretty thin in places. Don't shoot the messenger, I'm just reporting the oddities. :)
What is it with ConsoleKit? Its not running either & setroubleshooter says its being blocked too. And it suggests 'restorecon -v /path/to/console-kit- daemon', which doesn't change a thing. At this point all I can do it disable it and reboot.
Thanks Tim.
-- [tim@localhost ~]$ uname -r 2.6.27.15-78.2.23.fc9.i686
Don't send private replies to my address, the mailbox is ignored. I read messages from the public lists.
On Friday 27 February 2009, Gene Heskett wrote:
On Friday 27 February 2009, Tim wrote:
On Fri, 2009-02-27 at 21:28 -0500, Gene Heskett wrote:
I was looking at the name as shown by ls, and typing it exactly & got a "file not found", but a copy/paste from that ls listing and it worked.
I tend to use tab-completion for that sort of thing - type a few characters from the start of the filename, hit tab.
I tied that for the 2nd attempt to delete them, tab completion wasn't working for those. It is now and did work fine before I did that. I'd scratch my head a little harder, but at 74, the hair is not only gray, but is pretty thin in places. Don't shoot the messenger, I'm just reporting the oddities. :)
What is it with ConsoleKit? Its not running either & setroubleshooter says its being blocked too. And it suggests 'restorecon -v /path/to/console-kit- daemon', which doesn't change a thing. At this point all I can do it disable it and reboot.
Thanks Tim.
Yup, I disabled selinux & rebooted, and now I have all those console-kits running again. Although I've never had a good explanation of what they are. I suspect that the hourly awstats run will also work now.
Is selinux on its way out? Killing console-kit seems like a very good way to shoot itself, a bit higher than the foot. :)
-
Gene Heskett -
Kevin Kofler -
Patrick O'Callaghan -
Tim