More avc denies

Leonard den Ottolander leonard at den.ottolander.nl
Mon May 10 16:02:04 UTC 2004


Hi Tim,

And what about the ntpdate errors?

ntpdate <server>:
avc:  denied  { getattr } for  pid=1759 exe=/usr/sbin/ntpdate
path=/dev/tty1 dev=hda2 ino=71082 scontext=root:system_r:ntpd_t
tcontext=root:object_r:sysadm_tty_device_t tclass=chr_file
avc:  denied  { ioctl } for  pid=1759 exe=/usr/sbin/ntpdate
path=/dev/tty1 dev=hda2 ino=71082 scontext=root:system_r:ntpd_t
tcontext=root:object_r:sysadm_tty_device_t tclass=chr_file

And cron.daily?

avc:  denied  { read } for  pid=1818 exe=/bin/cat name=access_log
dev=hda2 ino=390310 scontext=system_u:system_r:system_crond_t
tcontext=root:object_r:httpd_log_t tclass=file

and 20 secs later in cron:

avc:  denied  { execute_no_trans } for  pid=1960 exe=/usr/sbin/prelink
path=/lib/ld-2.3.3.so dev=hda2 ino=32386
scontext=system_u:system_r:prelink_t tcontext=system_u:object_r:ld_so_t
tclass=file

Leonard.

-- 
mount -t life -o ro /dev/dna /genetic/research





More information about the fedora-selinux-list mailing list