SELinux is preventing sh from getattr access on the file /usr/sbin/ldconfig.

[Daniel J Walsh]

On 06/27/2015 07:01 PM, Ed Greshko wrote:
> On 06/27/15 21:15, Andras Simon wrote:
>> 2015-06-27 15:11 GMT+02:00, Andras Simon <szajmi at gmail.com>:
>>> Should I be worried about the $subject?
>> And there's also a "SELinux is preventing sh from execute access on
>> the file /usr/sbin/ldconfig" which I've only just noticed. It sounds
>> even scarier.
>>
> Does your output match these?
>
> [egreshko at meimei ~]$ ls -Z /bin/bash
> system_u:object_r:shell_exec_t:s0 /bin/bash
>
> [egreshko at meimei ~]$ ls -Z /usr/sbin/ldconfig
> system_u:object_r:ldconfig_exec_t:s0 /usr/sbin/ldconfig
>
Do you have the avc's?

ausearch -m avc