gconf AVCs....

[Daniel J Walsh]

Tom London wrote:
> On 7/20/07, Daniel J Walsh <dwalsh at redhat.com> wrote:
>> Tom London wrote:
>> > A bit more info:
>> >
>> > Appear to get this each time a new window is to be created:
>> >
>> > type=AVC msg=audit(1184941619.962:41): avc:  denied  { associate } for
>> > pid=3234 comm="gconfd-2" name="saved_state.tmp"
>> > scontext=system_u:object_r:unlabeled_t:s0
>> > tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
>> > type=SYSCALL msg=audit(1184941619.962:41): arch=40000003 syscall=5
>> > success=no exit=-13 a0=834c8a0 a1=241 a2=1c0 a3=811d230 items=0 ppid=1
>> > pid=3234 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500
>> > sgid=500 fsgid=500 tty=(none) comm="gconfd-2"
>> > exe="/usr/libexec/gconfd-2" subj=system_u:system_r:unconfined_t:s0
>> > key=(null)
>> >
>> > --
>> > fedora-selinux-list mailing list
>> > fedora-selinux-list at redhat.com
>> > https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>> Problem is that gconf_t has been eliminated from policy so you have a
>> process running as unlabeled_t.
>>
>> If you log out, make sure gconfd-2 is killed.  Log back in, it should 
>> work.
>>
>>
> I just rebooted, logged in again, and am still getting these. 'ps 
> agxZ' shows:
>
> [root at localhost ~]# ps agxZ | grep gconf
> system_u:system_r:unconfined_t   3342 ?        S      0:00
> /usr/libexec/gconfd-2 6
> system_u:system_r:unconfined_t   3359 ?        S      0:02 compiz
> --replace gconf
> system_u:system_r:unconfined_t   3855 pts/0    S+     0:00 grep gconf
> [root at localhost ~]#
>
> Last AVC:
>
> type=AVC msg=audit(1184949297.290:45): avc:  denied  { associate } for
> pid=3342 comm="gconfd-2" name="saved_state.tmp"
> scontext=system_u:object_r:unlabeled_t:s0
> tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
> type=SYSCALL msg=audit(1184949297.290:45): arch=40000003 syscall=5
> success=no exit=-13 a0=821f8c0 a1=241 a2=1c0 a3=81a9230 items=0 ppid=1
> pid=3342 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500
> sgid=500 fsgid=500 tty=(none) comm="gconfd-2"
> exe="/usr/libexec/gconfd-2" subj=system_u:system_r:unconfined_t:s0
> key=(null)
>
> Did I mess something up?
>
> tom
> -- 
> Tom London

restorecon -R -v /home