On 02/07/09 10:42, Vadym Chepkov wrote:
It seems sysstat policy in Fedora 11 needs adjustment, it didn't happen before:
type=AVC msg=audit(1246506781.781:1687): avc: denied { read } for pid=16924 comm="find" name="mls" dev=selinuxfs ino=12 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file
A lot of things are generating denials like these at the moment, not just sysstat. There's a libselinux update in the pipeline that should resolve it.
Paul.