selinux is now denying its own manager

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gene Heskett wrote:
> Greetings;
> 
> I just did a yumex update which included the python and semanage updates, 
> and selinux positively threw a fit.
> 
> setroubleshooter says I now have 47 brand new copies of this:
> 
> host=coyote.coyote.den type=AVC msg=audit(1217637926.43:906): avc: denied { sys_tty_config } for pid=2768 comm="semanage" 
> capability=26 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:semanage_t:s0 tclass=capability 
> 
> host=coyote.coyote.den type=SYSCALL msg=audit(1217637926.43:906): arch=40000003 syscall=54 success=yes exit=0 a0=1 a1=5401 
> a2=bfd9796c a3=bfd97a8c items=0 ppid=2762 pid=2768 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 
> tty=(none) ses=1 comm="semanage" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null) 
> 
> Fixable?
> 
> Thanks.
> 
These should be fixed in latest Rawhide and Fedora 9 policy.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkiXSh8ACgkQrlYvE4MpobOL8ACgzwc6Kz3fFMxkBNAWHHtDcUNJ
47oAoKpTUNN+GtvRgm7Gn8i4GackklaO
=u43k
-----END PGP SIGNATURE-----