constraints

Shintaro Fujiwara shintaro.fujiwara at gmail.com
Tue Jun 30 11:29:28 UTC 2009


Hi, I want to yum install or update from certain domain (segatex_t),
but although I set segatex.te right permission even I dontaudit
disabled in vain.
So, I followed Mr. Walsh lecture, asking audit2why.

I still don't know how to solve the problem so please help.

[root at notepc ~]# audit2why -i /var/log/audit/audit.log
type=AVC msg=audit(1246361092.291:17): avc:  denied  { transition }
for  pid=3116 comm="segatex" path="/usr/bin/yum" dev=dm-0 ino=594330
scontext=unconfined_u:unconfined_r:segatex_t:s0
tcontext=unconfined_u:system_r:rpm_t:s0 tclass=process

	Was caused by:
		Policy constraint violation.

		May require adding a type attribute to the domain or type to satisfy
the constraint.

		Constraints are defined in the policy sources in policy/constraints
(general), policy/mcs (MCS), and policy/mls (MLS).

type=AVC msg=audit(1246361092.303:18): avc:  denied  { transition }
for  pid=3117 comm="segatex" path="/usr/bin/yum" dev=dm-0 ino=594330
scontext=unconfined_u:unconfined_r:segatex_t:s0
tcontext=unconfined_u:system_r:rpm_t:s0 tclass=process

	Was caused by:
		Policy constraint violation.

		May require adding a type attribute to the domain or type to satisfy
the constraint.

		Constraints are defined in the policy sources in policy/constraints
(general), policy/mcs (MCS), and policy/mls (MLS).



-- 
http://intrajp.no-ip.com/ Home Page




More information about the fedora-selinux-list mailing list