On Mon, 2005-11-14 at 08:29 -0200, Giovanni P. Tirloni wrote:
Craig White wrote:
I am getting tons of these messages since I updated to 4.2
Nov 12 12:21:39 srv1 dbus: Can't send to audit system: USER_AVC pid=2839 uid=81 loginuid=-1 message=avc: denied { send_msg } for scontext=user_u:system_r:unconfined_t tcontext=user_u:system_r:initrc_t tclass=dbus
Now I can see this process...
# ps aux|grep 2839 dbus 2839 0.0 0.3 16168 1888 ? Ssl Nov11 0:13 dbus- daemon-1 --system root 17173 0.0 0.1 3748 668 pts/2 S+ 12:22 0:00 grep 2839
but I'm wondering how do I fix selinux so that it doesn't 'deny' this?
Thanks
Craig
RHEL update 2 has introduced some changes in the audit system. Please read the release notes (kernel changes) and it'll tell you how to disable that.
http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/release- \ notes/as-amd64/RELEASE-NOTES-U2-x86_64-en.html
---- I have read through the SELinux manual several times and I am not that smart.
I did do a relabel of the system but that didn't fix it.
I tried... # cat /etc/selinux/targeted/contexts/users/root system_r:unconfined_t system_r:unconfined_t
# cat /etc/selinux/targeted/contexts/users/dbus system_r:unconfined_t system_r:unconfined_t
(copying the file for root and making a file for the user dbus)
Since this is my home system - the one I use to learn stuff on, this isn't a huge problem like if it were a clients system but that's why I do this...to learn.
I didn't mean to spark off a useless debate about the value of SELinux because at this stage, most of everything has already been said and I want to learn it, not debate it.
I don't know if this stems from my compiling my own appletalk and megaraid modules or some other stupid thing that I have done and thus somehow wasn't covered in the upgrade from 4.1 to 4.2 or if everyone who upgraded from 4.1 to 4.2 sees these messages in their logs.
Anyway, thanks for the response...I joined the fedora-selinux mail list to see if I can get some help there as this crew seems to want to debate rather than learn.
Craig