Re: SELinux preventing D-Bus starting ConsoleKit etc - Was: F10 - pulseaudio not running

[Daniel J Walsh <dwalsh redhat com>]

On 05/20/2009 05:33 PM, Mike Fleetwood wrote:
> Daniel J Walsh wrote:
> > On 05/20/2009 04:23 AM, Mike Fleetwood wrote:
> > > I have identified that my issues are caused by SELinux.  I have
> > > rebooted with enforcing=0 to switch SELinux into permissive mode and
> > > ConsoleKit and Pulseaudio start correctly and audacious plays music.
> > > Even after performing a full relabelling of the SELinux security
> > > context of all files by touching /.autorelabel and rebooting, SELinux
> > > in enforcing is preventing D-Bus starting ConsoleKit and Pulseaudio
> > > starting.  Investigation into SELinux continuing.
> > >
> > > E.g. SELinux in enforcing mode:
> > > [root mfleetwo3 ~]# id -Z
> > > unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh
> > > [root mfleetwo3 ~]# service messagebus status
> > > env: /etc/init.d/messagebus: Permission denied
> > >
> > > and SELinux in permissive mode:
> > > [root mfleetwo3 ~]# service messagebus status
> > > dbus-daemon (pid 2736 2055) is running...
> > Are you fully yum update on selinux policy?
> >
> >
> > yum -y upgrade selinux-policy-targeted
>
> SELinux is fully update to date.
>
> [root mfleetwo3 ~]# yum -y upgrade selinux-policy-targeted
> Loaded plugins: refresh-packagekit
> Setting up Upgrade Process
> No Packages marked for Update
>
> [root mfleetwo3 ~]# rpm -qa | egrep 'selinux|policy'
> checkpolicy-2.0.16-3.fc10.i386
> libselinux-devel-2.0.78-1.fc10.i386
> selinux-policy-targeted-3.5.13-59.fc10.noarch
> libselinux-2.0.78-1.fc10.i386
> libselinux-utils-2.0.78-1.fc10.i386
> policycoreutils-2.0.57-17.fc10.i386
> selinux-policy-3.5.13-59.fc10.noarch
> libselinux-python-2.0.78-1.fc10.i386
> [root mfleetwo3 ~]# rpm -qa | egrep 'selinux|policy' | xargs rpm -V
>
> Thanks,
> Mike
Are you seeing any avc's in /var/log/audit/audit.log?