avc: denied ... syslogd and others.

Daniel J Walsh dwalsh at redhat.com
Thu Dec 9 16:53:26 UTC 2004


Vinicius wrote:

>Hello,
>
>How to resolve the problems below, please?
>
>"Dec  8 15:36:59 cviniciusm kernel: audit(1102527416.432:0): avc:
>denied  { read
> } for  pid=2005 exe=/sbin/syslogd name=libc-2.3.3.so dev=hda7
>ino=752988 sconte
>xt=user_u:system_r:syslogd_t tcontext=system_u:object_r:file_t
>tclass=file
>Dec  8 15:36:59 cviniciusm kernel: audit(1102527416.432:0): avc:  denied
>{ geta
>ttr } for  pid=2005 exe=/sbin/syslogd path=/lib/tls/libc-2.3.3.so
>dev=hda7 ino=7
>52988 scontext=user_u:system_r:syslogd_t
>tcontext=system_u:object_r:file_t tclas
>s=file
>Dec  8 15:36:59 cviniciusm kernel: audit(1102527416.432:0): avc:  denied
>{ exec
>ute } for  pid=2005 path=/lib/tls/libc-2.3.3.so dev=hda7 ino=752988
>scontext=use
>r_u:system_r:syslogd_t tcontext=system_u:object_r:file_t tclass=file
>Dec  8 15:36:59 cviniciusm kernel: audit(1102527416.463:0): avc:  denied
>{ appe
>nd } for  pid=2006 exe=/sbin/syslogd name=messages dev=hda7 ino=115590
>scontext=
>user_u:system_r:syslogd_t tcontext=system_u:object_r:file_t tclass=file
>Dec  8 15:36:59 cviniciusm kernel: audit(1102527416.463:0): avc:  denied
>{ ioct
>l } for  pid=2006 exe=/sbin/syslogd path=/var/log/messages dev=hda7
>ino=115590 s
>context=user_u:system_r:syslogd_t tcontext=system_u:object_r:file_t
>tclass=file
>Dec  8 15:36:59 cviniciusm kernel: audit(1102527416.576:0): avc:  denied
>{ sear
>ch } for  pid=2021 exe=/sbin/portmap name=/ dev=hda7 ino=2
>scontext=user_u:syste
>m_r:portmap_t tcontext=system_u:object_r:file_t tclass=dir
>Dec  8 15:36:59 cviniciusm kernel: audit(1102527416.576:0): avc:  denied
>{ read
> } for  pid=2021 exe=/sbin/portmap name=libnsl-2.3.3.so dev=hda7
>ino=753010 scon
>text=user_u:system_r:portmap_t tcontext=system_u:object_r:file_t
>tclass=file
>Dec  8 15:36:59 cviniciusm kernel: audit(1102527416.576:0): avc:  denied
>{ geta
>ttr } for  pid=2021 exe=/sbin/portmap path=/lib/libnsl-2.3.3.so dev=hda7
>ino=753
>010 scontext=user_u:system_r:portmap_t tcontext=system_u:object_r:file_t
>tclass=
>file
>Dec  8 15:36:59 cviniciusm kernel: audit(1102527416.576:0): avc:  denied
>{ exec
>ute } for  pid=2021 path=/lib/libnsl-2.3.3.so dev=hda7 ino=753010
>scontext=user_
>u:system_r:portmap_t tcontext=system_u:object_r:file_t tclass=file"
>
>"# sestatus
>SELinux status:         enabled
>SELinuxfs mount:        /selinux
>Current mode:           permissive
>Mode from config file:  error (Success)
>Policy version:         18
>Policy from config file:targeted
>
>Policy booleans:
>...
>syslogd_disable_trans   inactive
>..."
>
>TIA, Vinicius.
>
>
>--
>fedora-selinux-list mailing list
>fedora-selinux-list at redhat.com
>http://www.redhat.com/mailman/listinfo/fedora-selinux-list
>  
>
Your file system has not been labeled, touch /.autorelabel and reboot.

Dan




More information about the fedora-selinux-list mailing list