flood of selinux avcs, settroubleshoot all over the place(sorry for all the avcs)

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Antonio Olivares wrote:
> --- Tom London <selinux at gmail.com> wrote:
> 
>> On Wed, Apr 9, 2008 at 5:52 PM, Antonio Olivares
>> <olivares14031 at yahoo.com> wrote:
>>>  --- Tom London <selinux at gmail.com> wrote:
>>>
>>>  > Are you running X,  firefox, etc. as root?
>>>  >
>>>
>>>  Yes, I could not log on as normal user.  I did
>> not get
>>>  any while running KDE, but the apps were crashing
>> too
>>>  much so I went to GNOME on that machine.  Then I
>>>  started seeing the AVCS just these time.  Does
>> only
>>>  root see AVCS now?
>>>
>>>  Thanks,
>>>
>>>  Antonio
>>>
>> I see no AVCs logged in as a normal user.
>>
>> In general, it is not considered a good idea to run
>> X and firefox as root.
>>
>> tom
>>
>> -- 
>> Tom London
>>
> I know that, but logging in as normal user and typing
> startx did not work, error reading /var/log/Xorg.0.log
> ?
> 
> I had no other choice, apparently it is working now,
> *crossing my fingers*, still cannot su - 
> on that machine.
> 
> Thanks,
> 
> Antonio 
> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com 
> 
There is a bug in the selinux-policy package that you installed from.

unconfined_u is not defined.

# semanage user -a -P user -R "unconfined_r system_r" -r s0-s0:c0.c1023
unconfined_u

Should fix your problem.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkf+cKYACgkQrlYvE4MpobN0zACg32tUKOQpf1WtdkZKN1FEorYc
AqgAnjHuLY7PA8nedykJaARfVpWDIsBE
=tjRP
-----END PGP SIGNATURE-----