readahead / audit /selinux problem

oldman talbotscott at cox.net
Mon Mar 12 22:09:43 UTC 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Seems to me I'm having a good share of the problems this week, the latest:
after booting and logging in I noticed a horrendous slowdown my mouse
was crawling etc. Firing up top, I found that the culprit was audispd,
which digging around I found was part of the whole Audit thing.
Further along I found pages! of audit errors in my dmesg such as:

audit(1173729877.970:8960): avc:  denied  { getattr } for  pid=1537
comm="readahead" name="fd0u1680" dev=tmpfs ino=6170
scontext=system_u:system_r:readahead_t:s0
tcontext=system_u:object_r:default_t:s0 tclass=blk_file
audit(1173729877.970:8961): avc:  denied  { getattr } for  pid=1537
comm="readahead" name="fd0u1440" dev=tmpfs ino=6169
scontext=system_u:system_r:readahead_t:s0
tcontext=system_u:object_r:default_t:s0 tclass=blk_file

These are but the last two, but as I said pages! and all have the
comm=readahead, all have the various fd0XXXX which I know to be the
3.5" floppy in the various sizes of discs that may be used in them
(pretty darn sure of that anyway)


Additionally, and likely caused by the same problem, the
setroubleshooter refuses to open, just sits there saying "loading
files" forever....

The audispd and audit error messages are avoided by setting selinux=0
in the kernel line, so I assume this was caused by the last security
policy update.  Did anyone else see this?

Scott


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFF9c+m5mBKdb7VQEcRAuSXAKCulC+IDjEkFXedk9BuJMtCI8kX2ACgmPFi
f7fVupRz9Qch65g+orQjVcA=
=B2py
-----END PGP SIGNATURE-----




More information about the fedora-test-list mailing list