On Mon, 2005-11-14 at 20:39 -0500, Tom Diehl wrote:
> On Sat, 12 Nov 2005, Craig White wrote:
>
> > I am getting tons of these messages since I updated to 4.2
> >
> > Nov 12 12:21:39 srv1 dbus: Can't send to audit system: USER_AVC pid=2839
> > uid=81 loginuid=-1 message=avc: denied { send_msg } for
> > scontext=user_u:system_r:unconfined_t tcontext=user_u:system_r:initrc_t
> > tclass=dbus
> >
>
> The above rpm fixed it for me, although I still do not understand the
> problem. :-)
----
apparently the problem is that the user 'dbus' is not root and is not
thus empowered to send messages to audit system.
The apparent lack of people bitching about this on nahant list or centos
list makes me think that a large amount of RHEL 4 (or clone) users have
simply turned SELinux off. I guess that puzzles me as much as anything.
Craig
ps - my fix, though more work, doesn't use stuff out of rawhide and
probably is more instructive towards solving problems than simply
installing an updated rpm from rawhide (which is eminently easier).
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.