FYI: new rawhide boot failure

Jim Meyering jim at meyering.net
Fri Jan 13 11:46:14 UTC 2012


Just a heads up.
I usually update a rawhide VM daily and reboot at least once or twice
a week.  Today space was getting a little low on the parent partition,
so I stopped the VM in order to run virt-sparsify on its image.
Nice: that saved 3GB.  Booting again, however, there were numerous
service-start failures and it never reached a point where I could get
into it.  I tried again, using the original image, just in case, but
it failed the same way.  Finally, I resorted to adding enforcing=0
on the boot command line.  With that, it started.

There are a bunch of AVCs in /var/log/audit/audit.log.
The first three were these:

type=AVC msg=audit(1326440396.499:393): avc:  denied  { syslog_mod } for  pid=415 comm="systemd-journal" scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system
type=AVC msg=audit(1326440397.097:394): avc:  denied  { sendto } for  pid=1146 comm="dbus-daemon" path="/dev/log" scontext=system_u:system_r:xdm_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=unix_dgram_socket
type=AVC msg=audit(1326440397.097:395): avc:  denied  { sendto } for  pid=939 comm="dbus-daemon" path="/dev/log" scontext=system_u:system_r:xdm_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=unix_dgram_socket

followed by 14 like this:

type=AVC msg=audit(1326444676.387:32): avc:  denied  { setuid } for  pid=382 comm="systemd-journal" capability=7  scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=capability


More information about the devel mailing list