Cisco VPN problem

Chandana De Silva chandana at desilva.id.au
Sun May 15 07:35:59 UTC 2005


On Sat, 2005-05-14 at 20:39 +1000, Russell Coker wrote:
> What messages do you see in /var/log/audit/audit.log?
This is what I get:
ype=KERNEL msg=audit(1116142236.929:9075412): syscall=125 per=400000 exit=-13 a0=294000 a1=41000 a2=5 a3=bf8ba290 items=0 pid=6079 loginuid=-1 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 comm=vpnclient exe=/opt/cisco-vpnclient/bin/vpnclient
type=KERNEL msg=audit(1116142236.929:9075412): avc:  denied  { execmod } for  path=/opt/cisco-vpnclient/lib/libvpnapi.so dev=hda2 ino=1293106 scontext=user_u:system_r:unconfined_t tcontext=root:object_r:usr_t tclass=file

> Try using chcon to change the type of libvpnapi.so to shlib_t.

What is the command for this, is it 
chcon -v shlib_t /opt/cisco-vpnclient/lib/libvpnapi.so

( I have not used chcon before, so I am not sure how to supply the
CONTEXT).

Thanks for your help.
Chandana





More information about the test mailing list