Rawhide SE Linux targeted policy warning !!!

Steve G linux_4ever at yahoo.com
Fri Dec 24 21:28:51 UTC 2004


>There is no avc messages or anything useful.

OK here's what I pulled from the audit log:

event={'msg_type'=KERNEL 'seq'=0 'len'=222
'message'='audit(1103922269.990:3027786): avc:  denied  { entrypoint } for 
pid=3176 exe=/usr/bin/gdm-binary path=/etc/X11/xdm/Xsession dev=hda2 ino=214827
scontext=user_u:system_r:httpd_t tcontext=system_u:object_r:etc_t tclass=file' }

event={'msg_type'=KERNEL 'seq'=0 'len'=87
'message'='audit(1103922269.990:3027786): item=0 name=/etc/X11/xdm/Xsession
inode=214827 dev=00:00gdm-binary path=/etc/X11/xdm/Xsession dev=hda2 ino=214827
scontext=user_u:system_r:httpd_t tcontext=system_u:object_r:etc_t tclass=file' }

I'm wondering where the httpd_t comes from? I've relabeled the system a couple of
times. BTW, cups is just scrolling avc denied messages:

event={'msg_type'=KERNEL 'seq'=0 'len'=194
'message'='audit(1103922414.543:809779): avc:  denied  { unlink } for  pid=1849
exe=/usr/sbin/cupsd name=0 dev=hda2 ino=212999 scontext=user_u:system_r:cupsd_t
tcontext=system_u:object_r:file_t tclass=file' }

-Steve Grubb

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 




More information about the fedora-test-list mailing list