security contexts

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/09/2012 09:33 AM, m.roth at 5-cent.us wrote:
> In CentOS 6.2, I'm getting sshd[6116]: pam_selinux(sshd:session):
> Security context unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023
> is not allowed for
> 
> and
> 
> sshd[6116]: pam_selinux(sshd:session): Unable to get valid context
> for root
> 
> Googling shows me nothing useful - what's causing this? Is it a
> process or a file that needs something changed? This is a
> production and home directory server, so I can't touch
> /.autorelabel and reboot, though I can certainly do whole directory
> trees.
> 
> mark
> 
> -- selinux mailing list selinux at lists.fedoraproject.org 
> https://admin.fedoraproject.org/mailman/listinfo/selinux
> 
> 
ps -eZ | grep sshd.

You can run

fixfiles restore

Which would fix the labeling on your system without a reboot, it will
not guarantee that all processes are running with the correct label
though.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8LBggACgkQrlYvE4MpobPicQCcDmQNGNTPd3EfjyJprgpcTbVW
YwQAn3KV6gXlEiT5BHFjgs3OweUFG9CC
=EF76
-----END PGP SIGNATURE-----