Re: mrtg selinux denials in default configuration

[Daniel J Walsh <dwalsh redhat com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

David Timms wrote:
> Daniel J Walsh wrote:
>> David Timms wrote:
>>> David Timms wrote:
>>>> Should there be selinux denials on a default install of a package ?
>>> audit item attached.
> 
>> Your /root directory is labeled incorrectly.
> I did a touch /.autorelabel and reboot yesterday morning, and made the
> setroubleshooter work. These have occurred since then. There is some old
> .xauth files from last year in the folder, but none seem to have
> incorrect context.
> 
>> restorecon -R -v /root
> Tried restorecon -R -v -n /root
> - there were no replies.
> 
> restorecon -R -v /root
> - there was also no replies.
> My understanding is that any files that needed their secontext restored
> woudl have been echoed.
> 
>> Should fix.  That is what setroubleshoot suggested, did you try it.
> No.
> Is {restorecon -v './root'} the same as the above ?
> It does not echo any response either.
> 
>> Default installs should not be generating AVC's
> Does that include an upgrade F8-F9beta ?
> 
> In any case I'm doing a full relabel again, after I send this message,
> and I'll see if that solves it...
> 
> -- 
> fedora-selinux-list mailing list
> fedora-selinux-list redhat com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
No the upgrade from F8-F9 Beta will create avc's.  :^(

I am working on fixing these.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkgDswAACgkQrlYvE4MpobPAXwCfRkanAojdPEtLXTAL7hmzhYtZ
FQkAoMOe3UiHDYDbimJnUF0lQVV0/Qzh
=QETz
-----END PGP SIGNATURE-----