problems after updating selinux-policy-targeted

[Stephen Smalley]

On Wed, 2005-06-29 at 10:35 -0300, Martín Marqués wrote:
> After the update I wasn't able to login through ssh. Restarted sshd and 
> everything started working OK.
> 
> Now I have this problem when login in with KDE (from the X console). I 
> restarted KDM (killall -HUP X) but it didn't work.
> 
> These are the error logs I get:
> 
> Jun 29 10:30:08 mail kernel: audit(1120051808.126:0): avc:  denied  
> { execmod } for  pid=2952 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> ino=50817 scontext=user_u:system_r:unconfined_t tcontext=root:object_r:lib_t 
> tclass=file
> Jun 29 10:30:09 mail kernel: audit(1120051809.938:0): avc:  denied  
> { execmod } for  pid=2995 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> ino=50817 scontext=user_u:system_r:unconfined_t tcontext=root:object_r:lib_t 
> tclass=file
> Jun 29 10:30:11 mail kernel: audit(1120051811.282:0): avc:  denied  
> { execmod } for  pid=3044 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> ino=50817 scontext=user_u:system_r:unconfined_t tcontext=root:object_r:lib_t 
> tclass=file
> Jun 29 10:30:12 mail kernel: audit(1120051811.670:0): avc:  denied  
> { execmod } for  pid=3099 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> ino=50817 scontext=user_u:system_r:unconfined_t tcontext=root:object_r:lib_t 
> tclass=file
> Jun 29 10:30:13 mail kernel: audit(1120051813.903:0): avc:  denied  
> { execmod } for  pid=3143 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> ino=50817 scontext=user_u:system_r:unconfined_t tcontext=root:object_r:lib_t 
> tclass=file
> Jun 29 10:30:14 mail kernel: audit(1120051814.889:0): avc:  denied  
> { execmod } for  pid=3194 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> ino=50817 scontext=user_u:system_r:unconfined_t tcontext=root:object_r:lib_t 
> tclass=file
> Jun 29 10:30:16 mail kernel: audit(1120051816.129:0): avc:  denied  
> { execmod } for  pid=3238 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> ino=50817 scontext=user_u:system_r:unconfined_t tcontext=root:object_r:lib_t 
> tclass=file
> Jun 29 10:30:17 mail kernel: audit(1120051817.941:0): avc:  denied  
> { execmod } for  pid=3282 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> ino=50817 scontext=user_u:system_r:unconfined_t tcontext=root:object_r:lib_t 
> tclass=file
> Jun 29 10:30:18 mail kernel: audit(1120051818.943:0): avc:  denied  
> { execmod } for  pid=3327 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> ino=50817 scontext=user_u:system_r:unconfined_t tcontext=root:object_r:lib_t 
> tclass=file
> Jun 29 10:30:20 mail kernel: audit(1120051820.651:0): avc:  denied  
> { execmod } for  pid=3373 comm=prefdm path=/lib/libdl-2.3.5.so dev=hda1 
> ino=50817 scontext=user_u:system_r:unconfined_t tcontext=root:object_r:lib_t 
> tclass=file
> Jun 29 10:30:21 mail init: Id "x" respawning too fast: disabled for 5 minutes

What kernel are you running?  uname -r
See if you still have a problem after booting the latest kernel
(2.6.11-1.35_FC3).  If so, then downgrade your policy.

See 
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161834
and
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161867

-- 
Stephen Smalley
National Security Agency