Kernel error avc F13

[Dominick Grift]

On Tue, Jun 15, 2010 at 09:38:47AM +0100, Frank Murphy wrote:
> from logwatch
> 
> --------------------- Kernel Begin ------------------------
> 
> 
>  WARNING:  Kernel Errors Present
>     type=1400 audit(1276553951.414:525): avc:  denied  { read append }
> for  pid=2526 comm="polkit-agent-he" path="/home/user/.xsession-errors"
> dev=dm-7 ino=2 ...:  1 Time(s)

That is not enough information. You may be able to retrieve the complete avc denial with the following command:

ausearch -m avc -ts yesterday | grep polkit | grep xsession

The AVC denials have information that is required to determine what happend.

> 
>  ---------------------- Kernel End -------------------------
> 
> 
> selinux-policy-3.7.19-28.fc13.noarch (from koji)
> kernel-PAE-2.6.33.5-128.fc13.i686 (from Koji)
> 
> -- 
> Regards,
> 
> Frank Murphy
> UTF_8 Encoded
> Friend of Fedora
> --
> selinux mailing list
> selinux at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/selinux/attachments/20100615/85272d88/attachment.bin