Rawhide avc messages

[Gary A. McGee]

Tom Diehl wrote:
> Hi all,
> 
> I have a laptop that I have installed rawhide on. For the last few days I have been
> getting the following avc messages:
> 
> Apr 21 11:38:36 bullwinkle kernel: audit(1114097912.824:0): avc:  denied  { sys_admin } for  pid=1878 exe=/sbin/consoletype capability=21 scontext=user_u:system_r:dhcpc_t tcontext=user_u:system_r:dhcpc_t tclass=capability
> Apr 21 11:38:36 bullwinkle kernel: audit(1114097914.047:0): avc:  denied  { sys_admin } for  pid=1907 exe=/sbin/consoletype capability=21 scontext=user_u:system_r:dhcpc_t tcontext=user_u:system_r:dhcpc_t tclass=capability
> Apr 21 11:38:36 bullwinkle kernel: audit(1114097914.302:0): avc:  denied  { rename } for  pid=1952 exe=/bin/mv name=ntp.conf dev=dm-0 ino=102686 scontext=user_u:system_r:dhcpc_t tcontext=user_u:object_r:etc_t tclass=file
> Apr 21 11:38:36 bullwinkle kernel: audit(1114097914.305:0): avc:  denied  { append } for  pid=1905 exe=/bin/bash name=ntp.conf dev=dm-0 ino=102686 scontext=user_u:system_r:dhcpc_t tcontext=user_u:object_r:etc_t tclass=file
> Apr 21 11:38:36 bullwinkle kernel: audit(1114097914.305:0): avc:  denied  { append } for  pid=1905 exe=/bin/bash name=ntp.conf dev=dm-0 ino=102686 scontext=user_u:system_r:dhcpc_t tcontext=user_u:object_r:etc_t tclass=file
> Apr 21 11:38:36 bullwinkle kernel: audit(1114097914.311:0): avc:  denied  { append } for  pid=1905 exe=/bin/bash name=ntp.conf dev=dm-0 ino=102686 scontext=user_u:system_r:dhcpc_t tcontext=user_u:object_r:etc_t tclass=file
> Apr 21 11:38:36 bullwinkle kernel: audit(1114097914.312:0): avc:  denied  { append } for  pid=1905 exe=/bin/bash name=ntp.conf dev=dm-0 ino=102686 scontext=user_u:system_r:dhcpc_t tcontext=user_u:object_r:etc_t tclass=file
> Apr 21 11:38:36 bullwinkle last message repeated 2 times
> Apr 21 11:38:36 bullwinkle kernel: audit(1114097914.495:0): avc:  denied  { sys_admin } for  pid=1965 exe=/sbin/consoletype capability=21 scontext=user_u:system_r:dhcpc_t tcontext=user_u:system_r:dhcpc_t tclass=capability
> Apr 21 11:38:36 bullwinkle kernel: audit(1114097916.060:0): avc:  denied  { setsched } for  pid=2048 exe=/sbin/auditd scontext=user_u:system_r:auditd_t tcontext=user_u:system_r:auditd_t tclass=process
> Apr 21 11:38:36 bullwinkle kernel: SELinux: initialized (dev rpc_pipefs, type rpc_pipefs), uses genfs_contexts
> 
> Can someone if this should be in bugzilla or what to do to fix this?
> 
> (bullwinkle pts10) # rpm -qa | grep selinux
> selinux-policy-targeted-1.23.12-1
> libselinux-1.23.7-2
> libselinux-devel-1.23.7-2
> (bullwinkle pts10) # rpm -qa | grep audit
> audit-libs-0.6.12-1
> audit-0.6.12-1
> (bullwinkle pts10) #
> 
> Regards,
> 
> Tom Diehl		tdiehl at rogueind.com		Spamtrap address mtd123 at rogueind.com
> 
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list
> 

Here is one that I filed.

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=155400

Regards,

Gary