kernel fails to install

Tom London selinux at gmail.com
Wed Dec 1 15:44:28 UTC 2004


Running strict/enforcing off of Rawhide.

Doing yesterday's updates, the kernel failed to 
install to /boot.  That is, no files installed
under /boot, but worked OK installing
files to /lib/modules.

I did an rpm -e, setenforce 0; rpm -ivh, and got
the following:
w
Nov 30 19:36:32 fedora kernel: audit(1101872192.328:0): avc:  denied 
{ read } for  pid=3647 exe=/bin/bash name=.bashrc dev=hda2 ino=1196086
scontext=root:sysadm_r:bootloader_t
tcontext=root:object_r:staff_home_t tclass=file
Nov 30 19:36:32 fedora kernel: audit(1101872192.328:0): avc:  denied 
{ getattr } for  pid=3647 exe=/bin/bash path=/root/.bashrc dev=hda2
ino=1196086 scontext=root:sysadm_r:bootloader_t
tcontext=root:object_r:staff_home_t tclass=file
Nov 30 19:36:32 fedora kernel: audit(1101872192.337:0): avc:  denied 
{ read } for  pid=3649 exe=/usr/bin/id name=config dev=hda2
ino=4509759 scontext=root:sysadm_r:bootloader_t
tcontext=system_u:object_r:selinux_config_t tclass=file
Nov 30 19:36:32 fedora kernel: audit(1101872192.338:0): avc:  denied 
{ getattr } for  pid=3649 exe=/usr/bin/id path=/etc/selinux/config
dev=hda2 ino=4509759 scontext=root:sysadm_r:bootloader_t
tcontext=system_u:object_r:selinux_config_t tclass=file
Nov 30 19:36:32 fedora kernel: audit(1101872192.501:0): avc:  denied 
{ execute } for  pid=3647 exe=/bin/bash name=colorls.sh dev=hda2
ino=4474159 scontext=root:sysadm_r:bootloader_t
tcontext=system_u:object_r:etc_t tclass=file
Nov 30 19:36:32 fedora kernel: audit(1101872192.530:0): avc:  denied 
{ execute } for  pid=3662 exe=/bin/bash name=consoletype dev=hda2
ino=2310212 scontext=root:sysadm_r:bootloader_t
tcontext=system_u:object_r:consoletype_exec_t tclass=file
Nov 30 19:36:32 fedora kernel: audit(1101872192.530:0): avc:  denied 
{ execute_no_trans } for  pid=3662 exe=/bin/bash
path=/sbin/consoletype dev=hda2 ino=2310212
scontext=root:sysadm_r:bootloader_t
tcontext=system_u:object_r:consoletype_exec_t tclass=file
Nov 30 19:36:32 fedora kernel: audit(1101872192.530:0): avc:  denied 
{ read } for  pid=3662 exe=/bin/bash path=/sbin/consoletype dev=hda2
ino=2310212 scontext=root:sysadm_r:bootloader_t
tcontext=system_u:object_r:consoletype_exec_t tclass=file

allow bootloader_t consoletype_exec_t:file { execute execute_no_trans read };
allow bootloader_t etc_t:file execute;
allow bootloader_t selinux_config_t:file { getattr read };
allow bootloader_t staff_home_t:file { getattr read };


-- 
Tom London




More information about the fedora-selinux-list mailing list