gnome-cpufreq-applet and SELinux

Parrish M Myers parrishmyers at yahoo.com
Fri Apr 9 20:06:22 UTC 2004


Hello,

Does anyone know how to give a gnome applet access to the sys directory
structure?  I installed the gnome-cpufreq-applet, and I can't get it to
update unless I run in permissive mode.  I keep getting these messages:

Apr  9 15:52:40 localhost kernel: audit(1081540360.841:0): avc:  denied
 { read } for  pid=1838 exe=/usr/libexec/gnome-cpufreq-applet
name=scaling_max_freq dev= ino=300 scontext=user_u:user_r:user_t
tcontext=system_u:object_r:sysfs_t tclass=file
Apr  9 15:52:40 localhost kernel: audit(1081540360.841:0): avc:  denied
 { getattr } for  pid=1838 exe=/usr/libexec/gnome-cpufreq-applet
path=/sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq dev= ino=300
scontext=user_u:user_r:user_t tcontext=system_u:object_r:sysfs_t
tclass=file
Apr  9 16:03:39 localhost kernel: audit(1081541019.732:0): avc:  denied
 { search } for  pid=1838 exe=/usr/libexec/gnome-cpufreq-applet dev=
ino=1 scontext=user_u:user_r:user_t tcontext=system_u:object_r:sysfs_t
tclass=dir

Is there a way to label the executable to have access to sys?  The sys
directory seems to be unlabeled...

Thanks.

=====
"Parrish Myers" <parrishmyers at yahoo.com>
----------------------------------------------------------------
Democracy is the worst form of government except all those other forms that have been tried from time to time. -- (Winston Churchill)





More information about the fedora-test-list mailing list