I am running SELinux in Permissive mode. GNOME and KDE are installed. Following the upgrade from CentOS 5.2 to 5.3 (32 bit) I am getting SELinux messages. Possibly of interest to someone here or upstream? (Since I'm using Permissive mode, this is not a problem for me). If these are known issues, please disregard. Messages follow:
(1) SELinux is preventing nm-system-setti (system_dbusd_t) "getsched" to <Unknown> (system_dbusd_t).
SELinux denied access requested by nm-system-setti. It is not expected that this access is required by nm-system-setti and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access.
Source Context: system_u:system_r:system_dbusd_tTarget Context: system_u:system_r:system_dbusd_tTarget Objects: None [ process ]Source: nm-system-settiSource Path: /usr/sbin/nm-system-settingsPort: <Unknown>Host: dell2400.homelanSource RPM Packages: NetworkManager-0.7.0-4.el5_3Target RPM Packages: Policy RPM: selinux-policy-2.4.6-203.el5Selinux Enabled: TruePolicy Type: targetedMLS Enabled: TrueEnforcing Mode: PermissivePlugin Name: catchallHost Name: dell2400.homelanPlatform: Linux dell2400.homelan 2.6.18-128.1.6.el5 #1 SMP Wed Apr 1 09:19:18 EDT 2009 i686 i686Alert Count: 11First Seen: Fri 10 Apr 2009 09:10:39 PM COTLast Seen: Thu 16 Apr 2009 07:31:47 AM COTLocal ID: 19712f1c-5303-49bf-a8bc-6016b7f060d5 Line Numbers:
Raw Audit Messages :host=dell2400.homelan type=AVC msg=audit(1239885107.4:18): avc: denied { getsched } for pid=2970 comm="nm-system-setti" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process host=dell2400.homelan type=SYSCALL msg=audit(1239885107.4:18): arch=40000003 syscall=155 success=yes exit=0 a0=b9a a1=b7f0690c a2=95fff4 a3=b7f06700 items=0 ppid=1 pid=2970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nm-system-setti" exe="/usr/sbin/nm-system-settings" subj=system_u:system_r:system_dbusd_t:s0 key=(null
(2) SELinux is preventing nm-system-setti (system_dbusd_t) "sys_nice" to <Unknown> (system_dbusd_t).
SELinux denied access requested by nm-system-setti. It is not expected that this access is required by nm-system-setti and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access.
Source Context: system_u:system_r:system_dbusd_tTarget Context: system_u:system_r:system_dbusd_tTarget Objects: None [ capability ]Source: nm-system-settiSource Path: /usr/sbin/nm-system-settingsPort: <Unknown>Host: dell2400.homelanSource RPM Packages: NetworkManager-0.7.0-4.el5_3Target RPM Packages: Policy RPM: selinux-policy-2.4.6-203.el5Selinux Enabled: TruePolicy Type: targetedMLS Enabled: TrueEnforcing Mode: PermissivePlugin Name: catchallHost Name: dell2400.homelanPlatform: Linux dell2400.homelan 2.6.18-128.1.6.el5 #1 SMP Wed Apr 1 09:19:18 EDT 2009 i686 i686Alert Count: 11First Seen: Fri 10 Apr 2009 09:10:39 PM COTLast Seen: Thu 16 Apr 2009 07:31:47 AM COTLocal ID: 6cf4e81a-0958-4d3e-aba8-9ab4c9e3b7c9 Line Numbers:
Raw Audit Messages :host=dell2400.homelan type=AVC msg=audit(1239885107.9:19): avc: denied { sys_nice } for pid=2970 comm="nm-system-setti" capability=23 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=capability host=dell2400.homelan type=AVC msg=audit(1239885107.9:19): avc: denied { setsched } for pid=2970 comm="nm-system-setti" scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=process host=dell2400.homelan type=SYSCALL msg=audit(1239885107.9:19): arch=40000003 syscall=156 success=yes exit=0 a0=b9a a1=0 a2=bfa7b5a4 a3=b7f06700 items=0 ppid=1 pid=2970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nm-system-setti" exe="/usr/sbin/nm-system-settings" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
-
Lanny Marcus