SELinux preventing D-Bus starting ConsoleKit etc - Was: F10 - pulseaudio not running

[Mike Fleetwood]

Daniel J Walsh wrote:
> Are you seeing any avc's in /var/log/audit/audit.log?

With SELinux in permissive mode ...
[root at mfleetwo3 ~]# id
uid=0(root) gid=0(root)
groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh
[root at mfleetwo3 ~]# service messagebus status
dbus-daemon (pid 2736 2055) is running...

I get the following in /var/log/audit/audit.log:
type=SELINUX_ERR msg=audit(1242912572.287:30134):
security_compute_sid:  invalid context
unconfined_u:unconfined_r:initrc_t:s0 for
scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tcontext=system_u:object_r:initrc_exec_t:s0 tclass=process
type=SYSCALL msg=audit(1242912572.287:30134): arch=40000003 syscall=11
success=yes exit=0 a0=bf981981 a1=bf980194 a2=8fca858 a3=4 items=0
ppid=4082 pid=4087 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
sgid=0 fsgid=0 tty=pts1 ses=2 comm="messagebus" exe="/bin/bash"
subj=unconfined_u:unconfined_r:initrc_t:s0 key=(null)
type=SELINUX_ERR msg=audit(1242912572.294:30135):
security_compute_sid:  invalid context
unconfined_u:unconfined_r:initrc_t:s0 for
scontext=unconfined_u:unconfined_r:initrc_t:s0
tcontext=system_u:object_r:consoletype_exec_t:s0 tclass=process
type=SYSCALL msg=audit(1242912572.294:30135): arch=40000003 syscall=11
success=yes exit=0 a0=8ec9e78 a1=8ec44b8 a2=8ec9c08 a3=0 items=0
ppid=4088 pid=4089 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
sgid=0 fsgid=0 tty=pts1 ses=2 comm="consoletype"
exe="/sbin/consoletype" subj=unconfined_u:unconfined_r:initrc_t:s0
key=(null)
type=SELINUX_ERR msg=audit(1242912572.310:30136):
security_compute_sid:  invalid context
unconfined_u:unconfined_r:initrc_t:s0 for
scontext=unconfined_u:unconfined_r:initrc_t:s0
tcontext=system_u:object_r:bin_t:s0 tclass=process
type=SYSCALL msg=audit(1242912572.310:30136): arch=40000003 syscall=11
success=yes exit=0 a0=8ec8e80 a1=8ec48f8 a2=8ec8fd0 a3=0 items=0
ppid=4090 pid=4091 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
sgid=0 fsgid=0 tty=pts1 ses=2 comm="pidof" exe="/sbin/killall5"
subj=unconfined_u:unconfined_r:initrc_t:s0 key=(null)


I assume that there is a single SELinux related root cause which is
preventing D-Bus starting ConsoleKit and preventing /sbin/service
reporting status of daemon when SELinux is in enforcing mode.

P.S. Sorry in advance if I don't replay for a week I am away on
holiday from Friday for a week with unknown Internet connectivity.

Thanks,
Mike