-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 05/08/2012 10:00 AM, Antonio Olivares wrote:
--- On Tue, 5/8/12, Daniel J Walsh <dwalsh(a)redhat.com> wrote:
> From: Daniel J Walsh <dwalsh(a)redhat.com> Subject: Re: X Hang when
> starting machine To: "Community support for Fedora users"
> <users(a)lists.fedoraproject.org> Date: Tuesday, May 8, 2012, 5:15 AM
> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>
> On 05/07/2012 11:06 PM, Ed Greshko wrote:
>> On 05/08/2012 08:39 AM, Antonio Olivares wrote:
>>> Dear folks,
>>>
>>> For the past week or so, I have a machine running
> Fedora 16 and X worked
>>> fine till a week or so ago. I have started in
> level 3 and relabeled
>>> everything(in case Selinux has a problem), but
> machine still hangs when
>>> starting up. I start in level 3 and type
> startx and I get Fallback mode
>>> (Gnome 3). If I start in gui mode I get a
> hang and cannot get to X.
>>> Sometimes I am lucky to get X. However
> booting with enforcing=0, X comes
>>> up with no problem.
>>>
>>> I have relabeled filesystem two times already and
> this continues to
>>> happen.
>>>
>>> Smolt Profile in case it is important
>>>
>>>
http://www.smolts.org/client/show/pub_6f209009-0c1d-4fe8-94e9-9dda0d19ac44
>>
>>>
>>
>>>
Error 503 Service Unavailable
>>
>>>
>>> I welcome ideas suggestions and comments. I
> am hitting this bug on a
>>> daily basis as my students use this machine for
> school work and it is not
>>> working well. My students are upset at me,
> because I have to add the
>>> extra enforcing=0, when things should just work.
>>>
>>
>> You don't say what video hardware or drivers are in
> use?
>>
>> Have you tried "startkde" instead of "startx" from
> runlevel 3?
>>
>> You said you saw another thread about selinux and
> X....but you didn't point
>> to it. Another pair if eyes reading the same things can
> be helpful.
>>
>>
> Could you attach a compressed "ausearch -i -m avc"
I have updated another machine and run into the same problem :( Starting in
enforcing=0 works :)
Here is the output of above command
[antonio@localhost ~]$ su - Password: [root@localhost ~]# ausearch -i -m
avc ---- type=SYSCALL msg=audit(10/05/2011 10:41:15.287:109) : arch=i386
syscall=lsetxattr success=no exit=-22(Invalid argument) a0=0xe77af68
a1=0x66f5d2 a2=0xe779d58 a3=0x24 items=0 ppid=1940 pid=1947 auid=antonio
uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root
fsgid=root tty=pts1 ses=2 comm=yum exe=/usr/bin/python
subj=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/05/2011 10:41:15.287:109) : avc: denied { mac_admin } for
pid=1947 comm=yum capability=mac_admin
scontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=capability2
---- type=SYSCALL msg=audit(10/05/2011 10:45:30.811:127) : arch=i386
syscall=unlinkat success=yes exit=0 a0=0xd a1=0xbf8df2cb a2=0x0
a3=0x8422dd0 items=0 ppid=1 pid=5449 auid=unset uid=root gid=root euid=root
suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset
comm=systemd-logind exe=/lib/systemd/systemd-logind
subj=system_u:system_r:systemd_logind_t:s0 key=(null) type=AVC
msg=audit(10/05/2011 10:45:30.811:127) : avc: denied { unlink } for
pid=5449 comm=systemd-logind name=user dev=tmpfs ino=21513
scontext=system_u:system_r:systemd_logind_t:s0
tcontext=system_u:object_r:config_home_t:s0 tclass=file ---- type=SYSCALL
msg=audit(10/06/2011 07:30:55.325:63) : arch=i386 syscall=mmap success=no
exit=-13(Permission denied) a0=0xbfbb8f38 a1=0x0 a2=PROT_NONE a3=MAP_FILE
items=0 ppid=1 pid=1865 auid=antonio uid=antonio gid=antonio euid=antonio
suid=antonio fsuid=antonio egid=antonio sgid=antonio fsgid=antonio
tty=(none) ses=2 comm=wine-preloader exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:30:55.325:63) : avc: denied { mmap_zero } for
pid=1865 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:30:56.017:64) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbfb2f918 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1872 auid=antonio uid=antonio
gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio
sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:30:56.017:64) : avc: denied { mmap_zero } for
pid=1872 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:30:56.444:65) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbf832298 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872 pid=1873 auid=antonio
uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
comm=wine-preloader exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:30:56.444:65) : avc: denied { mmap_zero } for
pid=1873 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:30:56.695:66) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbf8aeff8 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872 pid=1876 auid=antonio
uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
comm=wine-preloader exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:30:56.695:66) : avc: denied { mmap_zero } for
pid=1876 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:31:00.839:68) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbfac3f28 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1880 auid=antonio uid=antonio
gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio
sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:31:00.839:68) : avc: denied { mmap_zero } for
pid=1880 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:31:00.839:67) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbfed9e88 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1879 auid=antonio uid=antonio
gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio
sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:31:00.839:67) : avc: denied { mmap_zero } for
pid=1879 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:31:10.067:69) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbfe39b38 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876 pid=1892 auid=antonio
uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
comm=wine-preloader exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:31:10.067:69) : avc: denied { mmap_zero } for
pid=1892 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:31:45.589:74) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbf8ac478 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876 pid=2027 auid=antonio
uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
comm=wine-preloader exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:31:45.589:74) : avc: denied { mmap_zero } for
pid=2027 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:31:46.811:75) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbfdf4318 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1873 pid=2032 auid=antonio
uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
comm=wine-preloader exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:31:46.811:75) : avc: denied { mmap_zero } for
pid=2032 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:31:47.648:76) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbf813938 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=2040 auid=antonio uid=antonio
gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio
sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:31:47.648:76) : avc: denied { mmap_zero } for
pid=2040 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(11/29/2011 07:10:52.252:87) : arch=i386
syscall=open success=no exit=-13(Permission denied) a0=0x805db18
a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0 items=0 ppid=1 pid=4108
auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root
sgid=root fsgid=root tty=(none) ses=unset comm=mcelog exe=/usr/sbin/mcelog
subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC msg=audit(11/29/2011
07:10:52.252:87) : avc: denied { create } for pid=4108 comm=mcelog
name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
tcontext=system_u:object_r:var_run_t:s0 tclass=file ---- type=SYSCALL
msg=audit(11/29/2011 00:18:06.277:14) : arch=i386 syscall=open success=no
exit=-13(Permission denied) a0=0x805db18 a1=O_WRONLY|O_CREAT|O_TRUNC
a2=0x1b6 a3=0x0 items=0 ppid=1 pid=894 auid=unset uid=root gid=root
euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none)
ses=unset comm=mcelog exe=/usr/sbin/mcelog
subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC msg=audit(11/29/2011
00:18:06.277:14) : avc: denied { create } for pid=894 comm=mcelog
name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
tcontext=system_u:object_r:var_run_t:s0 tclass=file ---- type=SYSCALL
msg=audit(12/06/2011 01:54:44.898:13) : arch=i386 syscall=open success=no
exit=-13(Permission denied) a0=0x805db18 a1=O_WRONLY|O_CREAT|O_TRUNC
a2=0x1b6 a3=0x0 items=0 ppid=1 pid=916 auid=unset uid=root gid=root
euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none)
ses=unset comm=mcelog exe=/usr/sbin/mcelog
subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC msg=audit(12/06/2011
01:54:44.898:13) : avc: denied { create } for pid=916 comm=mcelog
name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
tcontext=system_u:object_r:var_run_t:s0 tclass=file
I will do the same in the other machine and copy it here inline
Thanks,
Antonio
rpm -q selinux-policy
selinux-policy-3.10.0-88.fc16
I believe some of these are fixed in the latest policy.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla -
http://enigmail.mozdev.org/
iEYEARECAAYFAk+pPXsACgkQrlYvE4MpobM1egCgoCvzWyu9yVxwMFsg5UlW3ML7
G2AAoL6g5nmg5xjrsZFIhi0E+a8Aradb
=td5x
-----END PGP SIGNATURE-----