prelink and yum conflict

Tom London selinux at gmail.com
Fri Oct 8 16:08:53 UTC 2004


If prelink is running from cron when you do a 'yum install' of a package
that want's to do a ldconfig, you get  the following avc

Oct  8 08:31:39 fedora kernel: audit(1097249499.123:0): avc:  denied 
{ read } for  pid=14475 exe=/lib/ld-2.3.3.so name=ld.so.cache dev=hda2
ino=4473477 scontext=system_u:system_r:prelink_t
tcontext=root:object_r:etc_t tclass=file

and a message from ldconfig complaining about not being able to
link ld.so.cache~

I believe (hope?!) that this is harmless. But, does it make sense
to prevent this, say by creating a lock files that would be used to
prevent prelink and ldconfig from colliding?

Or is it safe to allow this access?  A 'dontaudit' would still
leave curious looking messages during the yum.

tom

-- 
Tom London




More information about the fedora-selinux-list mailing list