Re: on machine with CPU -> 100%, lots of avc's

[Antonio Olivares <olivares14031 yahoo com>]

--- On Wed, 2/4/09, Dominick Grift <domg472 gmail com> wrote:

> From: Dominick Grift <domg472 gmail com>
> Subject: Re: on machine with CPU -> 100%, lots of avc's
> To: olivares14031 yahoo com
> Cc: fedora-selinux-list redhat com, fedora-test-list redhat com
> Date: Wednesday, February 4, 2009, 9:33 AM
> Op woensdag 04-02-2009 om 08:39 uur [tijdzone -0800],
> schreef Antonio
> Olivares:
> 
> > setroubleshooter does not kick in and I find these via
> dmesg.  
> > Thanks for help/advice provided.
>  
> Do you not have auditd enabled? Usually the avc denials are
> in /var/log/audit/audit.log
> 
> The avc denials are (most likely) due to missing policy.
> You can pipe
> them into the input stream of audit2why to confirm this.
> 
> > --


I wonder what is wrong auditd is not running :(, it is enabled via services, but it is not working:

[olivares localhost ~]$ su -
Password: 
[root localhost ~]# chkconfig auditd --list
auditd         	0:off	1:off	2:on	3:on	4:on	5:on	6:off
[root localhost ~]# service auditd status
auditd is stopped
[root localhost ~]# 


Thanks,

Antonio