semodule

[Daniel J Walsh]

On 05/24/2009 08:40 AM, Vadym Chepkov wrote:
> Hello,
>
> I have this AVC denial when I try to load my local policy module:
>
> time->Sun May 24 08:31:57 2009
> type=SYSCALL msg=audit(1243168317.542:724332): arch=40000003 syscall=11 success=yes exit=0 a0=1056700 a1=1563f60 a2=0 a3=0 items=0 ppid=17011 pid=17266 auid=4294967295
>   uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0
> -s0:c0.c1023 key=(null)
> type=AVC msg=audit(1243168317.542:724332): avc:  denied  { read write } for  pid=17266 comm="load_policy" name="1" dev=devpts ino=3 scontext=system_u:system_r:load_pol
> icy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sshd_devpts_t:s0 tclass=chr_file
>
> SETroubleshoot suggests setsebool -P allow_daemons_use_tty=1, but I have it on already. What gives? Thank you.
>
> selinux-policy-targeted-3.5.13-59.fc10.noarch
>
> Sincerely yours,
>    Vadym Chepkov
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list


Setroubleshoot is mistaken.  Are you ssh into a box and the running 
load_policy or are you running ssh remotehost load_policy?

If you ssh into a box and execute id -Z what does it show?