avc denied messages from ssh-agent

Richard Hally rhallyx at mindspring.com
Mon Jun 14 05:40:09 UTC 2004


While booting to run level 5 with the 427  kernel in enforcing mode and 
selinux-policy-strict-1.13.4-5,
the following avc denied messages occur:

Jun 13 21:04:52 new2 gdm(pam_unix)[2828]: session opened for user 
richard by (uid=0)
Jun 13 21:04:52 new2 kernel: audit(1087175092.764:0): avc:  denied  { 
search } for  pid=2923 exe=/usr/bin/ssh-agent name=selinux dev=hda2 
ino=913073 scontext=richard:staff_r:staff_ssh_agent_t 
tcontext=system_u:object_r:selinux_config_t tclass=dir
Jun 13 21:04:52 new2 kernel: audit(1087175092.764:0): avc:  denied  { 
read } for  pid=2923 exe=/usr/bin/ssh-agent name=mounts dev=proc 
ino=-268435447 scontext=richard:staff_r:staff_ssh_agent_t 
tcontext=system_u:object_r:proc_t tclass=lnk_file

HTH
Richard Hally



More information about the fedora-selinux-list mailing list