vbetool denied

[Dominick Grift]

On Mon, Dec 28, 2009 at 06:21:44PM -0500, Kirk Lowery wrote:
> I'm running a newly installed, uptodate Fedora 12 box. Is there any reason
> by vbetools is denied? From dmesg:
> 
> type=1400 audit(1262025694.652:4): avc:  denied  { mmap_zero } for  pid=598
> comm="vbetool" scontext=system_u:system_r:vbetool_t:s0-s0:c0.c1023
> tcontext=system_u:system_r:vbetool_t:s0-s0:c0.c1023 t
> class=memprotect
> 
> Is this a problem with my local system, or a more general bug? And what is
> the best way to fix this?

setsebool -P mmap_low_allowed on

That would (most likely) allow vbetool and any other program requiring it.

I just ignore that AVC denial on my system. I dont want it to have this access. It still seems to work fine though.

So, it is not really a bug (atleast the issue is know). But the permission that is required is disallowed by default. The command i pasted above would allow it.
> 
> TIA!
> 
> Kirk

> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20091229/ddeecf51/attachment.sig>