Getting a LOT of "hotplug_t" errors.

[Daniel B. Thurman]

Daniel B. Thurman wrote:
>
> It seems, that these are appearing whenever I am downloading files
> from an F9/10 NTFS samba shared file to a remote machine.  Is there
> anything I can do?
>
> ====================================================================
> Count    Description
> ====================================================================
> 636        SELinux is preventing pidof (hotplug_t) "sys_nice" hotplug_t.
> =================
> Raw Audit Messages          
> node=gold.cdkkt.com type=AVC msg=audit(1235083401.426:52788): avc:  
> denied  { sys_nice } for  pid=30760 comm="pidof" capability=23 
> scontext=system_u:system_r:hotplug_t:s0 
> tcontext=system_u:system_r:hotplug_t:s0 tclass=capability
>
> node=gold.cdkkt.com type=SYSCALL msg=audit(1235083401.426:52788): 
> arch=40000003 syscall=3 success=yes exit=203 a0=4 a1=b800e000 a2=400 
> a3=8177628 items=0 ppid=30725 pid=30760 auid=4294967295 uid=0 gid=0 
> euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 
> comm="pidof" exe="/sbin/killall5" subj=system_u:system_r:hotplug_t:s0 
> key=(null)
>
> ====================================================================
> Count    Description
> ====================================================================
> 636        SELinux is preventing pidof (hotplug_t) "sys_ptrace" 
> hotplug_t.
> =================
> Raw Audit Messages          
> node=gold.cdkkt.com type=AVC msg=audit(1235083401.426:52789): avc:  
> denied  { sys_ptrace } for  pid=30760 comm="pidof" capability=19 
> scontext=system_u:system_r:hotplug_t:s0 
> tcontext=system_u:system_r:hotplug_t:s0 tclass=capability
>
> node=gold.cdkkt.com type=SYSCALL msg=audit(1235083401.426:52789): 
> arch=40000003 syscall=85 success=no exit=-13 a0=bfc0dcb8 a1=81777b8 
> a2=1000 a3=bfc0dbbe items=0 ppid=30725 pid=30760 auid=4294967295 uid=0 
> gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) 
> ses=4294967295 comm="pidof" exe="/sbin/killall5" 
> subj=system_u:system_r:hotplug_t:s0 key=(null)
>
>
> ====================================================================
> Count    Description
> ====================================================================
> 212        SELinux is preventing ifdown-ipv6 (hotplug_t) "read" to net 
> (proc_net_t).
> =================
> Raw Audit Messages          
> node=gold.cdkkt.com type=AVC msg=audit(1235083401.406:52783): avc:  
> denied  { read } for  pid=30748 comm="ifdown-ipv6" name="net" dev=proc 
> ino=4026531869 scontext=system_u:system_r:hotplug_t:s0 
> tcontext=system_u:object_r:proc_net_t:s0 tclass=lnk_file
>
> node=gold.cdkkt.com type=SYSCALL msg=audit(1235083401.406:52783): 
> arch=40000003 syscall=195 success=no exit=-13 a0=865d3b0 a1=bfa834d0 
> a2=67fff4 a3=865d3b0 items=0 ppid=30725 pid=30748 auid=4294967295 
> uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) 
> ses=4294967295 comm="ifdown-ipv6" exe="/bin/bash" 
> subj=system_u:system_r:hotplug_t:s0 key=(null)
>
>
> Thanks,
> Dan
>
>
> -- 
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Never mind.
I found out that netplugd was activated and was interferring.
I turned this off and the problem went away.


Dan