Rawhide avc messages

Tom Diehl tdiehl at rogueind.com
Thu Apr 21 18:27:13 UTC 2005


Hi all,

I have a laptop that I have installed rawhide on. For the last few days I have been
getting the following avc messages:

Apr 21 11:38:36 bullwinkle kernel: audit(1114097912.824:0): avc:  denied  { sys_admin } for  pid=1878 exe=/sbin/consoletype capability=21 scontext=user_u:system_r:dhcpc_t tcontext=user_u:system_r:dhcpc_t tclass=capability
Apr 21 11:38:36 bullwinkle kernel: audit(1114097914.047:0): avc:  denied  { sys_admin } for  pid=1907 exe=/sbin/consoletype capability=21 scontext=user_u:system_r:dhcpc_t tcontext=user_u:system_r:dhcpc_t tclass=capability
Apr 21 11:38:36 bullwinkle kernel: audit(1114097914.302:0): avc:  denied  { rename } for  pid=1952 exe=/bin/mv name=ntp.conf dev=dm-0 ino=102686 scontext=user_u:system_r:dhcpc_t tcontext=user_u:object_r:etc_t tclass=file
Apr 21 11:38:36 bullwinkle kernel: audit(1114097914.305:0): avc:  denied  { append } for  pid=1905 exe=/bin/bash name=ntp.conf dev=dm-0 ino=102686 scontext=user_u:system_r:dhcpc_t tcontext=user_u:object_r:etc_t tclass=file
Apr 21 11:38:36 bullwinkle kernel: audit(1114097914.305:0): avc:  denied  { append } for  pid=1905 exe=/bin/bash name=ntp.conf dev=dm-0 ino=102686 scontext=user_u:system_r:dhcpc_t tcontext=user_u:object_r:etc_t tclass=file
Apr 21 11:38:36 bullwinkle kernel: audit(1114097914.311:0): avc:  denied  { append } for  pid=1905 exe=/bin/bash name=ntp.conf dev=dm-0 ino=102686 scontext=user_u:system_r:dhcpc_t tcontext=user_u:object_r:etc_t tclass=file
Apr 21 11:38:36 bullwinkle kernel: audit(1114097914.312:0): avc:  denied  { append } for  pid=1905 exe=/bin/bash name=ntp.conf dev=dm-0 ino=102686 scontext=user_u:system_r:dhcpc_t tcontext=user_u:object_r:etc_t tclass=file
Apr 21 11:38:36 bullwinkle last message repeated 2 times
Apr 21 11:38:36 bullwinkle kernel: audit(1114097914.495:0): avc:  denied  { sys_admin } for  pid=1965 exe=/sbin/consoletype capability=21 scontext=user_u:system_r:dhcpc_t tcontext=user_u:system_r:dhcpc_t tclass=capability
Apr 21 11:38:36 bullwinkle kernel: audit(1114097916.060:0): avc:  denied  { setsched } for  pid=2048 exe=/sbin/auditd scontext=user_u:system_r:auditd_t tcontext=user_u:system_r:auditd_t tclass=process
Apr 21 11:38:36 bullwinkle kernel: SELinux: initialized (dev rpc_pipefs, type rpc_pipefs), uses genfs_contexts

Can someone if this should be in bugzilla or what to do to fix this?

(bullwinkle pts10) # rpm -qa | grep selinux
selinux-policy-targeted-1.23.12-1
libselinux-1.23.7-2
libselinux-devel-1.23.7-2
(bullwinkle pts10) # rpm -qa | grep audit
audit-libs-0.6.12-1
audit-0.6.12-1
(bullwinkle pts10) #

Regards,

Tom Diehl		tdiehl at rogueind.com		Spamtrap address mtd123 at rogueind.com




More information about the selinux mailing list