I give up! Help on avc message for dev dm-0

Gianfranco Durin gdurin at tele2.it
Mon Oct 2 10:01:42 UTC 2006


Paul Howarth wrote:
[...]
> I suspect that these aren't the source of the problem. You may have a 
> directory labelled file_t that is used as a mountpoint and thus hidden 
> under another filesystem once the system has booted.
> 
> When exactly do you get these AVCs? Just at boot time, or all the time?
> 
> Paul.
> 

Sorry if it is taking so much time...

At boot time. Today I tried this.

first dmesg -c so I cleared the file

then reboot at 11:41

You can see included the new dmesg. We can note there is many avc 
messages after detection of ports, etc.

Because auserach -a does not give me results, I tried

ausearch -ui root (see below)

now:

ls -l --scontext /usr/sbin/gdm-binary
system_u:object_r:xdm_exec_t     /usr/sbin/gdm-binary


  ls -l --scontext /usr/bin/perl
system_u:object_r:bin_t          /usr/bin/perl

nothing is clear to me....

Many thanks again
Gianfranco

**********************************************************************



time->Mon Oct  2 11:41:14 2006
type=USER_END msg=audit(1159782074.476:378): user pid=2608 uid=0 
auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: session 
close acct=gf : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, 
terminal=:0 res=success)'
----
time->Mon Oct  2 11:41:14 2006
type=CRED_DISP msg=audit(1159782074.476:379): user pid=2608 uid=0 
auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: setcred 
acct=gf : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 
res=success)'
----
time->Mon Oct  2 11:43:03 2006
type=USER_AUTH msg=audit(1159782183.978:347): user pid=2485 uid=0 
auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: 
authentication acct=root : exe="/usr/bin/perl" (hostname=?, addr=?, 
terminal=? res=failed)'
----
time->Mon Oct  2 11:43:07 2006
type=USER_ERR msg=audit(1159782187.967:348): user pid=2551 uid=0 
auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: 
bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, 
terminal=console res=failed)'
----
time->Mon Oct  2 11:43:20 2006
type=USER_AUTH msg=audit(1159782200.703:349): user pid=2588 uid=0 
auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: 
authentication acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, 
addr=?, terminal=:0 res=success)'
----
time->Mon Oct  2 11:43:20 2006
type=USER_ACCT msg=audit(1159782200.703:350): user pid=2588 uid=0 
auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: 
accounting acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, 
terminal=:0 res=success)'
----
time->Mon Oct  2 11:43:20 2006
type=CRED_ACQ msg=audit(1159782200.703:351): user pid=2588 uid=0 
auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: 
setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, 
terminal=:0 res=success)'
----
time->Mon Oct  2 11:43:20 2006
type=LOGIN msg=audit(1159782200.703:352): login pid=2588 uid=0 old 
auid=4294967295 new auid=0
----
time->Mon Oct  2 11:43:20 2006
type=USER_START msg=audit(1159782200.703:353): user pid=2588 uid=0 
auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: session open 
acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 
res=success)'
----
time->Mon Oct  2 11:43:20 2006
type=USER_LOGIN msg=audit(1159782200.707:354): user pid=2588 uid=0 
auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='uid=0: 
exe="/usr/sbin/gdm-binary" (hostname=ethan.intra.inrim.it, addr=2.0.0.0, 
terminal=:0 res=success)'
----
time->Mon Oct  2 11:49:23 2006
type=USER_END msg=audit(1159782563.462:355): user pid=2588 uid=0 auid=0 
subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: session close 
acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 
res=success)'
----
time->Mon Oct  2 11:49:23 2006
type=CRED_DISP msg=audit(1159782563.466:356): user pid=2588 uid=0 auid=0 
subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: setcred acct=root : 
exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
----
time->Mon Oct  2 11:49:23 2006
type=USER_AVC msg=audit(1159782563.478:357): user pid=2677 uid=0 auid=0 
subj=root:system_r:unconfined_t:s0-s0:c0.c255 msg='avc:  1 AV entries 
and 1/512 buckets used, longest chain length 1 : exe="/bin/dbus-daemon" 
(sauid=0, hostname=?, addr=?, terminal=?)'
----
time->Mon Oct  2 11:49:33 2006
type=USER_AUTH msg=audit(1159782573.987:358): user pid=2588 uid=0 auid=0 
subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: authentication 
acct=gf : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 
res=success)'
----
time->Mon Oct  2 11:49:33 2006
type=USER_ACCT msg=audit(1159782573.987:359): user pid=2588 uid=0 auid=0 
subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: accounting acct=gf 
: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
----
time->Mon Oct  2 11:49:33 2006
type=CRED_ACQ msg=audit(1159782573.987:360): user pid=2588 uid=0 auid=0 
subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: setcred acct=gf : 
exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
----
time->Mon Oct  2 11:49:33 2006
type=LOGIN msg=audit(1159782573.987:361): login pid=2588 uid=0 old 
auid=0 new auid=5005
----
time->Mon Oct  2 11:49:34 2006
type=USER_START msg=audit(1159782574.007:362): user pid=2588 uid=0 
auid=5005 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: session 
open acct=gf : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, 
terminal=:0 res=success)'


-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: dmesg.out
Url: http://lists.fedoraproject.org/pipermail/users/attachments/20061002/e84e891f/attachment-0002.pl 


More information about the users mailing list