memcached policy

[Dominick Grift]

On Tue, 2009-06-30 at 15:02 -0700, Vadym Chepkov wrote:
> well, this packages needs to be obsoleted then. It was an honest mistake, I did yum search memcached and found it.
> 
> anyway, I did
> 
> yum erase memcached-selinux
> yum reinstall selinux-policy-targeted
> 
> But still get avc:
> 
> type=AVC msg=audit(1246399071.104:235): avc:  denied  { read } for  pid=23185 comm="memcached" name="cpuinfo" dev=proc ino=4026531978 scontext=unconfined_u:system_r:memcached_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file
> 
> 
> Sincerely yours,
>   Vadym Chepkov
> 

that would be; kernel_read_system_state(memcached_t) or
kernel_dontaudit_read_system_state(memcached_t)

If you notice loss in functionality then consider reporting this bug to
bugzilla.redhat.com in the selinux policy component.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20090701/e4f2d89d/attachment.sig>