sysstat policy

Paul Howarth paul at city-fan.org
Thu Jul 2 10:03:56 UTC 2009


On 02/07/09 10:42, Vadym Chepkov wrote:
> It seems sysstat policy in Fedora 11 needs adjustment, it didn't happen before:
>
> type=AVC msg=audit(1246506781.781:1687): avc:  denied  { read } for  pid=16924 comm="find" name="mls" dev=selinuxfs ino=12 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file

A lot of things are generating denials like these at the moment, not 
just sysstat. There's a libselinux update in the pipeline that should 
resolve it.

Paul.




More information about the fedora-selinux-list mailing list