<div>On 1/23/06, Justin Conover <<a href="mailto:justin.conover@gmail.com">justin.conover@gmail.com</a>> wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <div> <div>On 1/23/06, Justin Conover <<a href="mailto:justin.conover@gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> justin.conover@gmail.com</a>> wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <div><div>On 1/23/06, Daniel J Walsh <<a href="mailto:dwalsh@redhat.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> dwalsh@redhat.com</a>> wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Justin Conover wrote: > > > On 1/23/06, *Daniel J Walsh* <<a href="mailto:dwalsh@redhat.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">dwalsh@redhat.com</a> > <mailto: <a href="mailto:dwalsh@redhat.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">dwalsh@redhat.com</a>>> wrote: > > Roger Grosswiler wrote: > > this is after todays update: > > > > > > allow hald_t automount_tmp_t:dir getattr; > > allow hald_t boot_t:dir getattr; > > allow hald_t home_root_t:dir search; > > allow hald_t initctl_t:fifo_file write; > > allow hald_t initrc_var_run_t:file lock; > > allow hald_t mnt_t:dir read; > > allow hald_t mnt_t:file write; > > allow hald_t sysctl_fs_t:dir search; > > allow hald_t usr_t:file execute; > > allow hald_t var_lib_nfs_t:dir search; > > > > > > ...and again if selinux==enforced then no g-p-m > > > > Rog > > > > > What version of policy are you running? > > Latest version is supposed to allow hald to have full control over > mnt. > The usr_t:file execute sounds like a mislabled file which should have > been fixed by the latest policy also. > > > -- > fedora-test-list mailing list > <a href="mailto:fedora-test-list@redhat.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> fedora-test-list@redhat.com</a> <mailto:<a href="mailto:fedora-test-list@redhat.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">fedora-test-list@redhat.com</a>> > To unsubscribe: > <a href="https://www.redhat.com/mailman/listinfo/fedora-test-list" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> https://www.redhat.com/mailman/listinfo/fedora-test-list</a> > > > > rpm -qa *\policy\* > selinux-policy-targeted-2.2.2-1 > selinux-policy-2.2.2-1 > policycoreutils-1.29.9-2 > > Same problem. Please attach the audit.log that caused these messages. -- fedora-test-list mailing list <a href="mailto:fedora-test-list@redhat.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> fedora-test-list@redhat.com</a> To unsubscribe: <a href="https://www.redhat.com/mailman/listinfo/fedora-test-list" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">https://www.redhat.com/mailman/listinfo/fedora-test-list</a></blockquote> </div><div> justin@kainos:~$ gnome-power-manager ** (gnome-power-manager:23679): WARNING **: main: An SELinux policy prevents this sender from sending this message to this recipient (rejected message had interface " org.freedesktop.DBus" member "Hello" error name "(unset)" destination "org.freedesktop.DBus") ** ERROR **: This program cannot start until you start the dbussystem daemon This is usually started in initscripts, and is usually called messagebus It is STRONGLY recommended you reboot your compterafter restarting messagebus aborting... (gnome_segv:23680): Gtk-WARNING **: Theme directory 16x16/status16x16/stock/chart of theme gnome has no size field </div> </div> </blockquote></div></div>(gdb) bt #0 0x007eab89 in g_logv () from /usr/lib/libglib-2.0.so.0 #1 0x007eae47 in g_log () from /usr/lib/libglib-2.0.so.0 #2 0x0804eb8a in ?? () #3 0x006696b4 in __libc_start_main () from /lib/libc.so.6 #4 0x0804c0d1 in ?? () </blockquote></div> [root@kainos ~]# gnome-power-manager ** (gnome-power-manager:2894): WARNING **: main: Unable to determine the address of the message bus ** ERROR **: This program cannot start until you start the dbus session daemon This is usually started in X or gnome startup (depending on distro) You can launch the session dbus-daemon manually with this command: eval `dbus-launch --auto-syntax` aborting... (gnome_segv:2897): Gtk-WARNING **: Theme directory 16x16/status16x16/stock/chart of theme gnome has no size field [root@kainos ~]# /etc/init.d/haldaemon status hald (pid 2480) is running... [root@kainos audit]# grep pid=2480 audit.log type=USER_AVC msg=audit(1138046588.888:70): user pid=2449 uid=81 auid=4294967295 msg='avc: denied { acquire_svc } for service= org.freedesktop.Hal spid=2480 scontext=system_u:system_r:hald_t tcontext=system_u:system_r:initrc_t tclass=dbus : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'