sound within sandbox_web_t type and permissive type sandbox_web_client_t

Daniel J Walsh dwalsh at redhat.com
Tue Jun 22 12:27:50 UTC 2010


On 06/21/2010 07:24 PM, Christoph A. wrote:
> On 06/21/2010 04:47 PM, Daniel J Walsh wrote:
>> No the setroubleshooter is wrong.  What it should be telling you is that
>> the syscall that generated the AVC did not get denied.  The tool
>> mistakenly sees this and assumes that the process was permissive.  We
>> need to fix setroubleshoot to check the permissive flag in policy if the
>> success=yes flag is set.
>
> Should I file a bugreport against this or is there already one?
>
Yes
>> There is a bug report open on sound not working in F13 when run under
>> sandbox.  It seems to work on F14.
>>
>> Miroslav is working on this problem.
>
> Nice to here that someone is already tanking care of that issue.
> Could you point me to the bugreport?
>
Miroslav responded with Bug #602768
> kind regards,
> Christoph
>



More information about the selinux mailing list