Hi,
I am not very experienced with SELinux and I have a problem which I
can't track down. Any help would be really appreciated.
I have an 'install everything' Centos 4.2 system which I am using as a
workstation. Before anyone tells me off for installing everything, I
have done this in order to get used to CentOS before using it on live
servers.
Anyway when I log into X (gnome, gdm) I start getting the following
in /var/log/messages
Nov 30 12:47:39 needme dbus: Can't send to audit system: USER_AVC
pid=2916 uid=81 loginuid=-1 message=avc: denied { send_msg } for
scontext=user_u:system_r:unconfined_t tcontext=user_u:system_r:initrc_t
tclass=dbus
Nov 30 12:48:10 needme last message repeated 7 times
Nov 30 12:48:12 needme gconfd (MYUSERNAME-3780): Resolved address
"xml:readwrite:/home/MYUSERNAME/.gconf" to a writable configuration
source at position 0
Nov 30 12:48:15 needme dbus: Can't send to audit system: USER_AVC
pid=2916 uid=81 loginuid=-1 message=avc: denied { send_msg } for
scontext=user_u:system_r:unconfined_t tcontext=user_u:system_r:initrc_t
tclass=dbus
And it just keeps filling up my log file.
I read James B. Byrne's post on the 15th about audit2allow but I don't
believe that I should go fiddling with dbus. Wouldn't that just be
shooting the messenger?
I know that I wouldn't get these messages on a server because I wouldn't
be running X, but I would like to understand what is going on and
increase my confidence to admin SELinux properly.
Thanks in advance
Rob Watkin