avc denied messages from lvm.static

Russell Coker russell at coker.com.au
Tue Jun 15 02:25:00 UTC 2004


On Mon, 14 Jun 2004 22:13, Francis K Shim <francis.shim at sympatico.ca> wrote:
> I am just adding the audit output I got with regards to lvm.static:
>
> audit(1087215619.565:0): avc:  denied  { read } for  pid=835
> exe=/sbin/lvm.static name=dri dev=hda6 ino=409347
> scontext=system_u:system_r:lvm_t tcontext=system_u:object_r:dri_device_t
> tclass=dir
> audit(1087215619.575:0): avc:  denied  { search } for  pid=835
> exe=/sbin/lvm.static name=dri dev=hda6 ino=409347
> scontext=system_u:system_r:lvm_t tcontext=system_u:object_r:dri_device_t
> tclass=dir

We will put in dontaudit rules for that.

> audit(1087215621.189:0): avc:  denied  { getattr } for  pid=835
> exe=/sbin/lvm.static path=/dev/shm dev=hda6 ino=603157
> scontext=system_u:system_r:lvm_t tcontext=system_u:object_r:file_t
> tclass=dir
> audit(1087215621.189:0): avc:  denied  { read } for  pid=835
> exe=/sbin/lvm.static name=shm dev=hda6 ino=603157
> scontext=system_u:system_r:lvm_t tcontext=system_u:object_r:file_t
> tclass=dir

This is strange, you are the second person to report that /dev/shm is not 
mounted.  Have you done anything to make it not be mounted?

I think that we have a bug here related to /dev/shm, please send me 
your /etc/fstab (by private mail).

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page



More information about the fedora-selinux-list mailing list