AVC's and Xen
Gawain Lynch
gawain.lynch at bigpond.com
Tue Jun 13 16:22:27 UTC 2006
On Tue, 2006-06-13 at 11:51 -0400, James Antill wrote:
> On Tue, 2006-06-13 at 22:24 +1000, Gawain Lynch wrote:
> > audit(1150200957.379:95): avc: denied { use } for pid=4853 comm="xm"
> > name="console" dev=tmpfs ino=838 scontext=system_u:system_r:xm_t:s0
> > tcontext=system_u:system_r:init_t:s0 tclass=fd
>
> What xm command were you doing for this?
xm list
xm create
xm save
All of these were triggering the avc's
> You can use setbool xm_disable_trans=no, as a temporary workaround.
Is that maybe supposed to be setsebool xm_disable_trans=false
I obviously need to do a *lot* more reading on selinux before going down
this path. :-)
> Until recently combining Xen and SELinux basically didn't work at all,
> so we are improving a lot :).
That is OK, I thought it was up and running and just wanted to report
issues. I'll leave it be for the time being and study up so I can be of
more use in reporting/fixing these things.
Thanks kindly for your help,
Gawain
More information about the fedora-selinux-list
mailing list