SELinux AVCs with swap stored in LVM volume

Felipe Alfaro Solana felipe.alfaro at gmail.com
Sun Oct 30 09:11:44 UTC 2005


Hello,

I'm running Fedora Core RawHhide and I'm seeing lots of SELinux AVCs
during boot, related to my swap stored in a LVM volume:

audit(1130670344.636:4): avc:  denied  { read } for  pid=919
comm="restorecon" name="VolGroup00-Swap" dev=tmpfs ino=653
scontext=system_u:system_r:restorecon_t:s0
tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file

audit(1130670345.668:5): avc:  denied  { use } for  pid=932
comm="fsck" name="VolGroup00-Swap" dev=tmpfs ino=653
scontext=system_u:system_r:fsadm_t:s0
tcontext=system_u:system_r:kernel_t:s0 tclass=fd

audit(1130670345.952:6): avc:  denied  { read } for  pid=940
comm="restorecon" name="VolGroup00-Swap" dev=tmpfs ino=653
scontext=system_u:system_r:restorecon_t:s0
tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file

audit(1130670346.092:7): avc:  denied  { read } for  pid=941
comm="restorecon" name="VolGroup00-Swap" dev=tmpfs ino=653
scontext=system_u:system_r:restorecon_t:s0
tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file

Attached to this message you will find "dmesg" which stores the dmesg
kernel ring which results after booting into runlevel 5.

Any ideas?
Thanks!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dmesg
Type: application/octet-stream
Size: 15760 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20051030/4baa8375/attachment.obj>


More information about the fedora-selinux-list mailing list