Mysql setsched

[Stephen Smalley]

On Mon, 2005-05-16 at 14:47 +0300, Emek TUZUN wrote:
> What is SETSCHED fuction of MySql?
>  
> I am getting these logs but mysql works normal... What are these
> setsched denials?
>  
> May 16 01:39:04 xstream kernel: audit(1116243944.356:0): avc:  denied
> { setsched } for  pid=18216 exe=/usr/sbin/mysqld
> scontext=root:system_r:mysqld_t tcontext=root:system_r:mysqld_t
> tclass=process
> May 16 01:39:18 xstream kernel: audit(1116243958.654:0): avc:  denied
> { setsched } for  pid=18228 exe=/usr/sbin/mysqld
> scontext=root:system_r:mysqld_t tcontext=root:system_r:mysqld_t
> tclass=process
> May 16 01:39:30 xstream kernel: audit(1116243970.083:0): avc:  denied
> { setsched } for  pid=18229 exe=/usr/sbin/mysqld
> scontext=root:system_r:mysqld_t tcontext=root:system_r:mysqld_t
> tclass=process

Attempts to change priority via nice(2) or scheduling information via
sched_setscheduler(2).  You can get more information about the denial by
enabling syscall auditing (auditctl -e 1) and running mysqld again.  If
mysqld is just lowering its priority, then this should be allowed in the
policy.

-- 
Stephen Smalley
National Security Agency