I give up! Help on avc message for dev dm-0
Gianfranco Durin
gdurin at tele2.it
Mon Oct 2 10:01:42 UTC 2006
Paul Howarth wrote:
[...]
> I suspect that these aren't the source of the problem. You may have a
> directory labelled file_t that is used as a mountpoint and thus hidden
> under another filesystem once the system has booted.
>
> When exactly do you get these AVCs? Just at boot time, or all the time?
>
> Paul.
>
Sorry if it is taking so much time...
At boot time. Today I tried this.
first dmesg -c so I cleared the file
then reboot at 11:41
You can see included the new dmesg. We can note there is many avc
messages after detection of ports, etc.
Because auserach -a does not give me results, I tried
ausearch -ui root (see below)
now:
ls -l --scontext /usr/sbin/gdm-binary
system_u:object_r:xdm_exec_t /usr/sbin/gdm-binary
ls -l --scontext /usr/bin/perl
system_u:object_r:bin_t /usr/bin/perl
nothing is clear to me....
Many thanks again
Gianfranco
**********************************************************************
time->Mon Oct 2 11:41:14 2006
type=USER_END msg=audit(1159782074.476:378): user pid=2608 uid=0
auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: session
close acct=gf : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?,
terminal=:0 res=success)'
----
time->Mon Oct 2 11:41:14 2006
type=CRED_DISP msg=audit(1159782074.476:379): user pid=2608 uid=0
auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: setcred
acct=gf : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0
res=success)'
----
time->Mon Oct 2 11:43:03 2006
type=USER_AUTH msg=audit(1159782183.978:347): user pid=2485 uid=0
auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM:
authentication acct=root : exe="/usr/bin/perl" (hostname=?, addr=?,
terminal=? res=failed)'
----
time->Mon Oct 2 11:43:07 2006
type=USER_ERR msg=audit(1159782187.967:348): user pid=2551 uid=0
auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM:
bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?,
terminal=console res=failed)'
----
time->Mon Oct 2 11:43:20 2006
type=USER_AUTH msg=audit(1159782200.703:349): user pid=2588 uid=0
auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM:
authentication acct=root : exe="/usr/sbin/gdm-binary" (hostname=?,
addr=?, terminal=:0 res=success)'
----
time->Mon Oct 2 11:43:20 2006
type=USER_ACCT msg=audit(1159782200.703:350): user pid=2588 uid=0
auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM:
accounting acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?,
terminal=:0 res=success)'
----
time->Mon Oct 2 11:43:20 2006
type=CRED_ACQ msg=audit(1159782200.703:351): user pid=2588 uid=0
auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM:
setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?,
terminal=:0 res=success)'
----
time->Mon Oct 2 11:43:20 2006
type=LOGIN msg=audit(1159782200.703:352): login pid=2588 uid=0 old
auid=4294967295 new auid=0
----
time->Mon Oct 2 11:43:20 2006
type=USER_START msg=audit(1159782200.703:353): user pid=2588 uid=0
auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: session open
acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0
res=success)'
----
time->Mon Oct 2 11:43:20 2006
type=USER_LOGIN msg=audit(1159782200.707:354): user pid=2588 uid=0
auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='uid=0:
exe="/usr/sbin/gdm-binary" (hostname=ethan.intra.inrim.it, addr=2.0.0.0,
terminal=:0 res=success)'
----
time->Mon Oct 2 11:49:23 2006
type=USER_END msg=audit(1159782563.462:355): user pid=2588 uid=0 auid=0
subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: session close
acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0
res=success)'
----
time->Mon Oct 2 11:49:23 2006
type=CRED_DISP msg=audit(1159782563.466:356): user pid=2588 uid=0 auid=0
subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: setcred acct=root :
exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
----
time->Mon Oct 2 11:49:23 2006
type=USER_AVC msg=audit(1159782563.478:357): user pid=2677 uid=0 auid=0
subj=root:system_r:unconfined_t:s0-s0:c0.c255 msg='avc: 1 AV entries
and 1/512 buckets used, longest chain length 1 : exe="/bin/dbus-daemon"
(sauid=0, hostname=?, addr=?, terminal=?)'
----
time->Mon Oct 2 11:49:33 2006
type=USER_AUTH msg=audit(1159782573.987:358): user pid=2588 uid=0 auid=0
subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: authentication
acct=gf : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0
res=success)'
----
time->Mon Oct 2 11:49:33 2006
type=USER_ACCT msg=audit(1159782573.987:359): user pid=2588 uid=0 auid=0
subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: accounting acct=gf
: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
----
time->Mon Oct 2 11:49:33 2006
type=CRED_ACQ msg=audit(1159782573.987:360): user pid=2588 uid=0 auid=0
subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: setcred acct=gf :
exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
----
time->Mon Oct 2 11:49:33 2006
type=LOGIN msg=audit(1159782573.987:361): login pid=2588 uid=0 old
auid=0 new auid=5005
----
time->Mon Oct 2 11:49:34 2006
type=USER_START msg=audit(1159782574.007:362): user pid=2588 uid=0
auid=5005 subj=system_u:system_r:xdm_t:s0-s0:c0.c255 msg='PAM: session
open acct=gf : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?,
terminal=:0 res=success)'
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: dmesg.out
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20061002/e84e891f/attachment-0001.ksh>
More information about the fedora-list
mailing list