Heads-up: ipython-0.11 breaking anything :)

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/02/2011 04:22 PM, Jerry James wrote:
> 8.206691] type=1400 audit(1312314954.461:3): avc:  denied  { 
> dyntransition } for  pid=1 comm="systemd" 
> scontext=system_u:system_r:kernel_t:s0 
> tcontext=system_u:system_r:init_t:s0 tclass=process [   11.777659]
> type=1400 audit(1312314958.032:4): avc:  denied  { read } for
> pid=572 comm="systemd-sysctl" name="sysctl.conf" dev=dm-1 ino=131521
> scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 
> tcontext=system_u:object_r:system_conf_t:s0 tclass=file [
> 11.781152] type=1400 audit(1312314958.035:5): avc:  denied  { open }
> for  pid=572 comm="systemd-sysctl" name="sysctl.conf" dev=dm-1 
> ino=131521 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 
> tcontext=system_u:object_r:system_conf_t:s0 tclass=file [
> 11.800415] type=1400 audit(1312314958.055:6): avc:  denied  { getattr
> } for  pid=572 comm="systemd-sysctl" path="/etc/sysctl.conf" dev=dm-1
> ino=131521 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 
> tcontext=system_u:object_r:system_conf_t:s0 tclass=file [
> 17.387700] type=1400 audit(1312314963.642:7): avc:  denied  { 
> relabelto } for  pid=663 comm="systemd-tmpfile" name="seats"
> dev=tmpfs ino=12579 scontext=system_u:system_r:systemd_tmpfiles_t:s0 
> tcontext=system_u:object_r:systemd_logind_var_run_t:s0 tclass=dir [
> 17.393413] type=1400 audit(1312314963.648:8): avc:  denied  { 
> relabelto } for  pid=663 comm="systemd-tmpfile" name="sessions" 
> dev=tmpfs ino=12583 scontext=system_u:system_r:systemd_tmpfiles_t:s0 
> tcontext=system_u:object_r:systemd_logind_sessions_t:s0 tclass=dir [
> 19.280082] type=1400 audit(1312314965.535:9): avc:  denied  { unlink
> } for  pid=677 comm="NetworkManager" name="resolv.conf" dev=dm-1
> ino=131244 scontext=system_u:system_r:NetworkManager_t:s0 
> tcontext=system_u:object_r:etc_t:s0 tclass=file [   19.629917]
> type=1400 audit(1312314965.884:10): avc:  denied  { name_bind } for
> pid=840 comm="dhclient" src=11807 
> scontext=system_u:system_r:dhcpc_t:s0 
> tcontext=system_u:object_r:port_t:s0 tclass=udp_socket [   20.125998]
> type=1400 audit(1312314966.380:11): ac:  denied  { rename } for
> pid=904 comm="Xorg" name="Xorg.0.log" dev=dm-1 ino=392488 
> scontext=system_u:system_r:xserver_t:s0-s0:c0.c1023 
> tcontext=system_u:object_r:var_log_t:s0 tclass=file [   20.130982]
> type=1400 audit(1312314966.384:12): avc:  denied  { unlink } for
> pid=904 comm="Xorg" name="Xorg.0.log.old" dev=dm-1 ino=392491
> scontext=system_u:system_r:xserver_t:s0-s0:c0.c1023 
> tcontext=system_u:object_r:var_log_t:s0 tclass=file [  607.234395]
> type=1400 audit(1312315564.790:13): avc:  denied  { read } for
> pid=1745 comm="sendmail" name="online" dev=sysfs ino=34 
> scontext=system_u:system_r:logwatch_mail_t:s0-s0:c0.c1023 
> tcontext=system_u:object_r:sysfs_t:s0 tclass=file [  607.234488]
> type=1400 audit(1312315564.790:14): avc:  denied  { open } for
> pid=1745 comm="sendmail" name="online" dev=sysfs ino=34 
> scontext=system_u:system_r:logwatch_mail_t:s0-s0:c0.c1023 
> tcontext=system_u:object_r:sysfs_t:s0 tclass=file
> 
> In addition, looking back farther in the log, I see LOTS of these
> when SELinux was in enforcing mode:
> 
> avc:  denied  { sigchld } for pid=1 comm="systemd" 
> scontext=system_u:system_r:loadkeys_t:s0 
> tcontext=system_u:system_r:kernel_t:s0 tclass=process


Most of these are fixed in the latest policy

selinux-policy-3.10.0-14.fc17.noarch
selinux-policy-3.10.0-14.fc16.noarch

Depending on your definition of Rawhide...

A couple are mislabeled files resolv.conf and Xorg.0.log.old

I think the sigchld ones are caused by kernel_t not transitioning to init_t.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk45Za4ACgkQrlYvE4MpobMPVgCfW4XARfU/RVStIy6Ju78GU5Wv
8A4AoMYS6aso1AiFSeUFkiXle7fYyK6G
=UdQq
-----END PGP SIGNATURE-----