Re: sysstat policy

[Daniel J Walsh <dwalsh redhat com>]

On 07/02/2009 06:03 AM, Paul Howarth wrote:
> On 02/07/09 10:42, Vadym Chepkov wrote:
> > It seems sysstat policy in Fedora 11 needs adjustment, it didn't
> > happen before:
> >
> > type=AVC msg=audit(1246506781.781:1687): avc: denied { read } for
> > pid=16924 comm="find" name="mls" dev=selinuxfs ino=12
> > scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023
> > tcontext=system_u:object_r:security_t:s0 tclass=file
>
> A lot of things are generating denials like these at the moment, not
> just sysstat. There's a libselinux update in the pipeline that should
> resolve it.
>
> Paul.
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list redhat com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Just upgrade to  selinux-policy-3.6.12-57.fc11.noarch
Which should fix these

yum -y upgrade selinux-policy-targeted