Experiences with selinux enabled targetted on Fedora Core 3

Tue Feb 22 01:15:48 UTC 2005

On Mon, 21 Feb 2005 16:05:39 PST, Richard E Miles said:

> audit(1109009536.010:0): avc:  denied  { search } for  pid=3541 exe=/sbin/portmap name=/ dev=hda2 ino=2 scontext=user_u:system_r:portmap_t tcontext=system_u:object_r:file_t tclass=dir

At least at one point in time, I was seeing random avc errors on mount points
that made absolutely no sense - I'd do an 'ls -Z' and it would look OK.
Finally twigged in that I needed to unmount the file system, relabel the
*directory*, and then remount.  Seem to remember /usr/share and /usr/local
biting me that way (/, /usr, /usr/local, and /usr/share are 4 different file
systems on my box).

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20050221/eb0889be/attachment.sig>