Syslogd sending output to devpts

Jose H. REMY Jose.Remy at SECUR.NET
Thu Nov 10 10:08:49 UTC 2005


I have updated to selinux-policy-targeted-1.27.1-2.11, and still be unable
to send logs to /dev/pts/*
...........audit.log
type=PATH msg=audit(1131616982.431:2085578): item=0 name="/dev/pts/2"
inode=1 de
v=00:09 mode=040755 ouid=0 ogid=0 rdev=00:00
type=SYSCALL msg=audit(1131616982.431:2085578): arch=40000003 syscall=5
success=
no exit=-13 a0=bfa18cda a1=8541 a2=1a4 a3=1 items=1 pid=331 auid=4294967295
uid=
0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm="syslogd"
exe="/sbin/sy
slogd"
type=AVC msg=audit(1131616982.431:2085578): avc:  denied  { append } for
pid=33
1 comm="syslogd" name=2 dev=devpts ino=4 scontext=root:system_r:syslogd_t
tconte
xt=root:object_r:devpts_t tclass=chr_file


Jose H. REMY

Network administrator


 -----Original Message-----
From: 	Daniel J Walsh [mailto:dwalsh at redhat.com] 
Sent:	Monday, November 07, 2005 18:35
To:	Jose H. REMY
Cc:	'fedora-selinux-list at redhat.com'
Subject:	Re: Syslogd sending output to devpts

Jose H. REMY wrote:
> Hi,
>
> Since I've installed SElinux  (fedora-release-4-2
> selinux-policy-targeted-1.23.16-6), configured with targeted policy
> SELinux status:                 enabledSELinuxfs mount:
> /selinuxCurrent mode:                   enforcingMode from config file:
> enforcingPolicy version:                 19Policy from config file:
> targeted
> I've trouble sending outputs of syslog toward a /dev/pts/* window
>
> My devpts context : crw--w----  root     tty      root:object_r:devpts_t
> My syslogd context : user_u:system_r:syslogd_t        1872 ?
00:00:00
> syslogdMy syslog.conf context: -rw-r--r--  root     root
> system_u:object_r:etc_t /etc/syslog.conf
>
> Thank you for help and explanation (why I don't always have an "avc"
denied
> message in message log?)
>   
They are being dontaudited.  Please update to the latest policy for 
FC4.  This should be allowed.
> Thanks,
>
> Jose H. REMY
>
> Network administrator
> SECUR.NET
>
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>   


-- 





-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.
-.-.
-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

ATTENTION: This message was automatically controled and filtered. S/MIME
will not work, use file encryption/signing instead.
Ce message INTERNET a ete controle et filtre par SECUR.NET (filtres: Anomy
HTML_cleaner, HTML_parser, MIME_tools); (antivirus: File_Scan, CLAMAV,
MacAFEE)
postmaster at localhost





-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.
-.-.
-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

        




More information about the fedora-selinux-list mailing list