SELinux preventing D-Bus starting ConsoleKit etc - Was: F10 - pulseaudio not running

[Daniel J Walsh]

On 05/21/2009 09:42 AM, Mike Fleetwood wrote:
> Daniel J Walsh wrote:
>> Are you seeing any avc's in /var/log/audit/audit.log?
>
> With SELinux in permissive mode ...
> [root at mfleetwo3 ~]# id
> uid=0(root) gid=0(root)
> groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
> context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh
> [root at mfleetwo3 ~]# service messagebus status
> dbus-daemon (pid 2736 2055) is running...
>
> I get the following in /var/log/audit/audit.log:
> type=SELINUX_ERR msg=audit(1242912572.287:30134):
> security_compute_sid:  invalid context
> unconfined_u:unconfined_r:initrc_t:s0 for
> scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
> tcontext=system_u:object_r:initrc_exec_t:s0 tclass=process
> type=SYSCALL msg=audit(1242912572.287:30134): arch=40000003 syscall=11
> success=yes exit=0 a0=bf981981 a1=bf980194 a2=8fca858 a3=4 items=0
> ppid=4082 pid=4087 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
> sgid=0 fsgid=0 tty=pts1 ses=2 comm="messagebus" exe="/bin/bash"
> subj=unconfined_u:unconfined_r:initrc_t:s0 key=(null)
> type=SELINUX_ERR msg=audit(1242912572.294:30135):
> security_compute_sid:  invalid context
> unconfined_u:unconfined_r:initrc_t:s0 for
> scontext=unconfined_u:unconfined_r:initrc_t:s0
> tcontext=system_u:object_r:consoletype_exec_t:s0 tclass=process
> type=SYSCALL msg=audit(1242912572.294:30135): arch=40000003 syscall=11
> success=yes exit=0 a0=8ec9e78 a1=8ec44b8 a2=8ec9c08 a3=0 items=0
> ppid=4088 pid=4089 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
> sgid=0 fsgid=0 tty=pts1 ses=2 comm="consoletype"
> exe="/sbin/consoletype" subj=unconfined_u:unconfined_r:initrc_t:s0
> key=(null)
> type=SELINUX_ERR msg=audit(1242912572.310:30136):
> security_compute_sid:  invalid context
> unconfined_u:unconfined_r:initrc_t:s0 for
> scontext=unconfined_u:unconfined_r:initrc_t:s0
> tcontext=system_u:object_r:bin_t:s0 tclass=process
> type=SYSCALL msg=audit(1242912572.310:30136): arch=40000003 syscall=11
> success=yes exit=0 a0=8ec8e80 a1=8ec48f8 a2=8ec8fd0 a3=0 items=0
> ppid=4090 pid=4091 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
> sgid=0 fsgid=0 tty=pts1 ses=2 comm="pidof" exe="/sbin/killall5"
> subj=unconfined_u:unconfined_r:initrc_t:s0 key=(null)
>
>
> I assume that there is a single SELinux related root cause which is
> preventing D-Bus starting ConsoleKit and preventing /sbin/service
> reporting status of daemon when SELinux is in enforcing mode.
>
> P.S. Sorry in advance if I don't replay for a week I am away on
> holiday from Friday for a week with unknown Internet connectivity.
>
> Thanks,
> Mike
>
Your message bus is running as initrc_t which indicates that you have a 
labeling problem.

fixfiles restore

Reboot and you should be all set.

Your message bus should be running as system_dbusd_t.  It is also 
running as unconfined_u:unconfined_r which indicates you have stopped 
and started it.

If you run restorecon -R -v /bin  I would figure you will see some 
mislabeled files.