[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: SELinux preventing D-Bus starting ConsoleKit etc - Was: F10 - pulseaudio not running

On 05/21/2009 11:27 AM, Mike Fleetwood wrote:
Daniel J Walsh wrote:
Your message bus is running as initrc_t which indicates that you have a
labeling problem.

fixfiles restore

Reboot and you should be all set.

Your message bus should be running as system_dbusd_t.  It is also running as
unconfined_u:unconfined_r which indicates you have stopped and started it.

If you run restorecon -R -v /bin  I would figure you will see some
mislabeled files.

Logged in to X11 via GDM as my user mfleetwo, then in a terminal su -.

[root mfleetwo3 ~]# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /selinux
Current mode:                   permissive
Mode from config file:          enforcing
Policy version:                 23
Policy from config file:        targeted

[root mfleetwo3 ~]# fixfiles restore
****************************************/sbin/setfiles:  unable to
stat file /home/mfleetwo/.gvfs: Permission denied
/sbin/setfiles:  error while labeling /:  Permission denied
/sbin/setfiles:  error while labeling /boot:  Permission denied

And in /var/log/audit/audit.log:
type=FS_RELABEL msg=audit(1242919396.655:30941): user pid=4985 uid=0
auid=500 ses=2 subj=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023
msg='op=mass relabel: exe="/sbin/setfiles" (hostname=?, addr=?,
terminal=pts/1 res=failed)'

Stopped at this point as to me it looks like 'fixfiles restore' didn't work.

[root mfleetwo3 ~]# df -k
Filesystem           1K-blocks      Used Available Use% Mounted on
                       46884088  36970092   7504128  84% /
/dev/sda1               202219     28319    163573  15% /boot
tmpfs                   772768        76    772692   1% /dev/shm

[root mfleetwo3 ~]# ls -dZ / /boot
drwxr-xr-x  root root system_u:object_r:root_t         /
drwxr-xr-x  root root system_u:object_r:boot_t         /boot


What file system are you using?

# restorecon -R -v / 2> /dev/null

You will get lots of errors.

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]