Re: nfs avc messages with kernel-2.6.16-1.2069_FC4

[Stephen Smalley <sds tycho nsa gov>]

On Sat, 2006-04-01 at 00:51 -0800, Antonio Olivares wrote:
> Dear all, 
>   I decided to install latest FC4 kernel
> 2.6.16-1.2069_FC4 or so. Upon booting I can no longer
> surf the internet.  I get some avc denied messages
> from dmesg.  How can I fix this issue?
> 
> I do not want to disable selinux.

Can you post the avc messages (or just the first few if there are many
repeats)?  You can use audit2allow to temporarily generate allow rules
for the denials until a policy update is issued, although it isn't
always what you want to do.  See the EXAMPLE section of the audit2allow
man page.

-- 
Stephen Smalley
National Security Agency