Re: Weird avc messages from udev

[Daniel J Walsh <dwalsh redhat com>]

Aleksey Nogin wrote:

> I am getting a lot of messages of the form:
>
> audit(1083104429.259:0): avc:  denied  { sendto } for  pid=23780 
> exe=/sbin/udevsendpath= udevd scontext=system_u:system_r:udev_t 
> tcontext=system_u:system_r:kernel_t tclass=unix_dgram_socket
> audit(1083104431.054:0): avc:  denied  { sendto } for  pid=23803 
> exe=/sbin/udevsendpath= udevd scontext=system_u:system_r:udev_t 
> tcontext=system_u:system_r:kernel_t tclass=unix_dgram_socket
> audit(1083104431.406:0): avc:  denied  { sendto } for  pid=23815 
> exe=/sbin/udevsendpath= udevd scontext=system_u:system_r:udev_t 
> tcontext=system_u:system_r:kernel_t tclass=unix_dgram_socket
> audit(1083104432.080:0): avc:  denied  { sendto } for  pid=23821 
> exe=/sbin/udevsendpath= udevd scontext=system_u:system_r:udev_t 
> tcontext=system_u:system_r:kernel_t tclass=unix_dgram_socket
Does adding
allow udev_t kernel_t:unix_dgram_socket { sendto };
solv the problem?

Dan