X Hang when starting machine

Daniel J Walsh dwalsh at redhat.com
Tue May 8 16:57:56 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/08/2012 10:26 AM, Antonio Olivares wrote:
>> Could you attach a compressed "ausearch -i -m avc"
>> 
> 
> Started machine in level 3 and can log in in "Fallback Mode", here's
> compressed file.
> 
> Regards,
> 
> 
> Antonio

The only AVC's that I see as not being allowed in the latest selinux-policy are:


allow rpm_t self:capability2 mac_admin;


This indicates that some rpm you installed is trying to set a label that the
current policy does not understand.

allow wine_t self:memprotect mmap_zero;

Wine wants to mmap kernel memory at a zero address space.  If you really need
this then turn on the mmap_low_allowed boolean. If you wine apps seem to be
working fine, then I would add a dontaudit for this avc.

allow accountsd_t proc_t:file read;

I just added a fix for this in selinux-policy-3.10.0-123.fc17.

allow mcelog_t var_run_t:file create;

mcelog writing to /var/run should not transition the label to something mcelog
should be able to handle.

None of these seem to be around X though.





-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk+pUJQACgkQrlYvE4MpobOW/gCfQNb6beCUrvs+KLMDYrIU4XKw
+XAAoOeImXQRGLeKm0F2mIgtPOOw1lYH
=usOP
-----END PGP SIGNATURE-----


More information about the users mailing list