setroubleshootd AVC denials???

Matej Cepl mcepl at redhat.com
Wed May 30 20:32:21 UTC 2007


On 2007-05-30, 17:10 GMT, Daniel J Walsh wrote:
> What platform are you seeing these on. 

i386, actually Dell Inspiron 2200 (a cheap notebook)

> execmem execstack should not be required for setroubleshoot.

What can I say?

> Looks like avahi is trying to communicate with dbus running as 
> unconfined_execmem_t?

Again, there shouldn't be anything special about avahi.

> You seem to be running a script from hal called hibernate?

Actually, this might be the only modification of the system -- 
I use a modified kernel from http://mhensler.de/swsusp/ (the only 
difference from stock kernels should be suspend2 patch -- 
http://www.suspend2.net/ ) and it has some modified utilities as 
well, among which is a shell script hibernate (switching off 
services, removing modules, and in other ways making computer 
palatable for suspending process) and modified pm-utils, which 
are probably running hibernate instead of whatever-is-a-standard 
suspend process in out-of-stock Fedora. If pm-utils are using hal 
to run hibernate, I have no idea.

Am I the only one running suspend2 with SELinux on?

Does it make any sense?

Matej




More information about the fedora-selinux-list mailing list