semodule

Vadym Chepkov chepkov at yahoo.com
Sun May 24 12:40:13 UTC 2009


Hello,

I have this AVC denial when I try to load my local policy module:

time->Sun May 24 08:31:57 2009
type=SYSCALL msg=audit(1243168317.542:724332): arch=40000003 syscall=11 success=yes exit=0 a0=1056700 a1=1563f60 a2=0 a3=0 items=0 ppid=17011 pid=17266 auid=4294967295
 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0
-s0:c0.c1023 key=(null)
type=AVC msg=audit(1243168317.542:724332): avc:  denied  { read write } for  pid=17266 comm="load_policy" name="1" dev=devpts ino=3 scontext=system_u:system_r:load_pol
icy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sshd_devpts_t:s0 tclass=chr_file

SETroubleshoot suggests setsebool -P allow_daemons_use_tty=1, but I have it on already. What gives? Thank you.

selinux-policy-targeted-3.5.13-59.fc10.noarch

Sincerely yours,
  Vadym Chepkov




More information about the fedora-selinux-list mailing list