gnome-cpufreq-applet and SELinux

[Richard Hally]

Parrish M Myers wrote:

>Hello,
>
>Does anyone know how to give a gnome applet access to the sys directory
>structure?  I installed the gnome-cpufreq-applet, and I can't get it to
>update unless I run in permissive mode.  I keep getting these messages:
>
>Apr  9 15:52:40 localhost kernel: audit(1081540360.841:0): avc:  denied
> { read } for  pid=1838 exe=/usr/libexec/gnome-cpufreq-applet
>name=scaling_max_freq dev= ino=300 scontext=user_u:user_r:user_t
>tcontext=system_u:object_r:sysfs_t tclass=file
>Apr  9 15:52:40 localhost kernel: audit(1081540360.841:0): avc:  denied
> { getattr } for  pid=1838 exe=/usr/libexec/gnome-cpufreq-applet
>path=/sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq dev= ino=300
>scontext=user_u:user_r:user_t tcontext=system_u:object_r:sysfs_t
>tclass=file
>Apr  9 16:03:39 localhost kernel: audit(1081541019.732:0): avc:  denied
> { search } for  pid=1838 exe=/usr/libexec/gnome-cpufreq-applet dev=
>ino=1 scontext=user_u:user_r:user_t tcontext=system_u:object_r:sysfs_t
>tclass=dir
>
>Is there a way to label the executable to have access to sys?  The sys
>directory seems to be unlabeled...
>
>Thanks.
>
>  
>
perhaps you could try running it in  a terminal  window after  doing 'su 
-'  so that your role is sysadm_r.
That is just a guess since I don't have the applet installed on my pIII 
500Mhz desktop.   ;-)