Axel Thimm Axel.Thimm at
Tue Aug 1 05:05:48 UTC 2006

On Mon, Jul 31, 2006 at 10:05:16AM -0400, Stephen Smalley wrote:
> On Mon, 2006-07-31 at 15:54 +0200, Axel Thimm wrote:
> > Hi,
> > 
> > after upgrading FC4 to FC5 and enabling selinux/targeted/permissive I
> > see lot's of hotplug_t domains. Most prominently every bash login and
> > the default ssh -l root domains (before newrole) are such. This
> > doesn't look right, did the upgrade go wrong somewhere?
> Presumably, as that definitely isn't correct.  
> /usr/sbin/sestatus -v

# id -Z
# /usr/sbin/sestatus -v
SELinux status:                 enabled
SELinuxfs mount:                /selinux
Current mode:                   permissive
Mode from config file:          permissive
Policy version:                 20
Policy from config file:        targeted

Process contexts:
Current context:		root:system_r:hotplug_t:SystemLow-SystemHigh
Init context:                   system_u:system_r:init_t
/sbin/mingetty                  system_u:system_r:kernel_t
/usr/sbin/sshd                  system_u:system_r:kernel_t

File contexts:
Controlling term:               root:object_r:devpts_t
/etc/passwd                     system_u:object_r:etc_t
/etc/shadow                     system_u:object_r:shadow_t
/bin/bash                       system_u:object_r:shell_exec_t
/bin/login                      system_u:object_r:login_exec_t
/bin/sh                         system_u:object_r:bin_t -> system_u:object_r:shell_exec_t
/sbin/agetty                    system_u:object_r:getty_exec_t
/sbin/init                      system_u:object_r:init_exec_t
/sbin/mingetty                  system_u:object_r:getty_exec_t
/usr/sbin/sshd                  system_u:object_r:sshd_exec_t
/lib/                  system_u:object_r:lib_t -> system_u:object_r:lib_t
/lib/              system_u:object_r:lib_t -> system_u:object_r:ld_so_t

Axel.Thimm at
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <>

More information about the fedora-selinux-list mailing list