Mysql setsched

[Daniel J Walsh]

Stephen Smalley wrote:

>On Mon, 2005-05-16 at 14:47 +0300, Emek TUZUN wrote:
>  
>
>>What is SETSCHED fuction of MySql?
>> 
>>I am getting these logs but mysql works normal... What are these
>>setsched denials?
>> 
>>May 16 01:39:04 xstream kernel: audit(1116243944.356:0): avc:  denied
>>{ setsched } for  pid=18216 exe=/usr/sbin/mysqld
>>scontext=root:system_r:mysqld_t tcontext=root:system_r:mysqld_t
>>tclass=process
>>May 16 01:39:18 xstream kernel: audit(1116243958.654:0): avc:  denied
>>{ setsched } for  pid=18228 exe=/usr/sbin/mysqld
>>scontext=root:system_r:mysqld_t tcontext=root:system_r:mysqld_t
>>tclass=process
>>May 16 01:39:30 xstream kernel: audit(1116243970.083:0): avc:  denied
>>{ setsched } for  pid=18229 exe=/usr/sbin/mysqld
>>scontext=root:system_r:mysqld_t tcontext=root:system_r:mysqld_t
>>tclass=process
>>    
>>
>
>Attempts to change priority via nice(2) or scheduling information via
>sched_setscheduler(2).  You can get more information about the denial by
>enabling syscall auditing (auditctl -e 1) and running mysqld again.  If
>mysqld is just lowering its priority, then this should be allowed in the
>policy.
>
>  
>
Latest policy allows this.

--