new SELinux error

[Paul Cartwright]

On 03/27/2014 08:27 PM, Ed Greshko wrote:
>>> What was the AVC that you got?
>>> >> On 03/27/2014 04:58 PM, Paul Cartwright wrote:
>> > Not sure exactly how to check. /var/log/secure has lots of entries.. I
>> > didn't write down the error message and the window is gone. where do I
>> > look ?
>> >
> The AVC would be found in /var/log/audit/audit.log
>
wow, my audit log was rolling over every day, these errors were coming
every second:

8 ses=4294967295 subj=system_u:system_r:httpd_t:s0 pid=17492
comm="httpd" reason="memory violation" sig=11
type=ANOM_ABEND msg=audit(1395999598.328:13458541): auid=4294967295
uid=48 gid=48 ses=4294967295 subj=system_u:system_r:httpd_t:s0 pid=17493
comm="httpd" reason="memory violation" sig=11
type=ANOM_ABEND msg=audit(1395999598.330:13458542): auid=4294967295
uid=48 gid=48 ses=4294967295 subj=system_u:system_r:httpd_t:s0 pid=17494
comm="httpd" reason="memory violation" sig=11
type=SERVICE_START msg=audit(1395999600.137:13458543): pid=1 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='
comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=?
res=success'
type=SERVICE_STOP msg=audit(1395999600.137:13458544): pid=1 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='
comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=?
res=success'


I shut down my web server & they stopped.


-- 
Paul Cartwright
Registered Linux User #367800 and new counter #561587