Any idea what causes this message?
Daniel J Walsh
dwalsh at redhat.com
Mon Jan 7 16:58:30 UTC 2008
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Knute Johnson wrote:
>> Its a mislabeled file. /var/log/btmp should be labeled faillog_t
>>
>> restorecon -R -v /var/log
>>
>> to fix up everything in /var/log. btmp is used whenever there is a
>> login failure (I think only failure...)
>>
>> not sure how it got mislabeled (what is supposed to create it, anyone
>> know? do you remember at some time untaring a bunch of files
>> in /var/log? or cp'ing in files? somehow it got created without the
>> 'right' label) but it is occasional because people only occasionally
>> screw up logging in and you get the denial because it is mislabeled.
>> Fix the label and you should be good from now on.
>>
>> -Eric
>
> Thanks, it was mislabeled. I don't know how but it's fixed now.
>
THere is a reported bug on logrotate I believe that is clearing the btmp
file but not labeling it correctly.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkeCWjYACgkQrlYvE4MpobNxpACdHcUIw1m/CiGAklKX9BxoD4PR
byYAn0/UZEXdbSlqBKUkSdumFwg01vqN
=b8zk
-----END PGP SIGNATURE-----
More information about the fedora-selinux-list
mailing list