sysstat policy

Daniel J Walsh dwalsh at redhat.com
Mon Jul 6 12:16:50 UTC 2009


On 07/02/2009 06:03 AM, Paul Howarth wrote:
> On 02/07/09 10:42, Vadym Chepkov wrote:
>> It seems sysstat policy in Fedora 11 needs adjustment, it didn't
>> happen before:
>>
>> type=AVC msg=audit(1246506781.781:1687): avc: denied { read } for
>> pid=16924 comm="find" name="mls" dev=selinuxfs ino=12
>> scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023
>> tcontext=system_u:object_r:security_t:s0 tclass=file
>
> A lot of things are generating denials like these at the moment, not
> just sysstat. There's a libselinux update in the pipeline that should
> resolve it.
>
> Paul.
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Just upgrade to  selinux-policy-3.6.12-57.fc11.noarch
Which should fix these

yum -y upgrade selinux-policy-targeted




More information about the fedora-selinux-list mailing list