7:39 p.m.
Dear folks,
For the past week or so, I have a machine running Fedora 16 and X worked fine till a week
or so ago. I have started in level 3 and relabeled everything(in case Selinux has a
problem), but machine still hangs when starting up. I start in level 3 and type startx
and I get Fallback mode (Gnome 3). If I start in gui mode I get a hang and cannot get to
X. Sometimes I am lucky to get X. However booting with enforcing=0, X comes up with no
problem.
I have relabeled filesystem two times already and this continues to happen.
Smolt Profile in case it is important
http://www.smolts.org/client/show/pub_6f209009-0c1d-4fe8-94e9-9dda0d19ac44
I welcome ideas suggestions and comments. I am hitting this bug on a daily basis as my
students use this machine for school work and it is not working well. My students are
upset at me, because I have to add the extra enforcing=0, when things should just work.
Best Regards,
Antonio
7:52 p.m.
On 05/07/2012 05:39 PM, Antonio Olivares wrote:
I welcome ideas suggestions and comments. I am hitting this bug on a
daily basis as my students use this machine for school work and it is not working well.
My students are upset at me, because I have to add the extra enforcing=0, when things
should just work.
What made you decide that SELinux was part of the problem, or did you
simply disable it by reflex? Are you getting any security alerts? When
you say that X doesn't start, do you mean that you're able to log in but
then X doesn't come up or do you mean that you don't even get a login
screen? Have you checked any of the appropriate logs when you're logged
into a console, and if so, have they told you anything? These and more
are probably questions you'd ask your students and for good reason: you
haven't really given us anything to go on.
7:59 p.m.
--- On Mon, 5/7/12, Joe Zeff <joe(a)zeff.us> wrote:
From: Joe Zeff <joe(a)zeff.us>
Subject: Re: X Hang when starting machine
To: "Community support for Fedora users" <users(a)lists.fedoraproject.org>
Date: Monday, May 7, 2012, 5:52 PM
On 05/07/2012 05:39 PM, Antonio
Olivares wrote:
> I welcome ideas suggestions and comments. I am
hitting this bug on a daily basis as my students use this
machine for school work and it is not working well. My
students are upset at me, because I have to add the extra
enforcing=0, when things should just work.
What made you decide that SELinux was part of the problem,
or did you simply disable it by reflex? Are you
getting any security alerts? When you say that X
doesn't start, do you mean that you're able to log in but
then X doesn't come up or do you mean that you don't even
get a login screen? Have you checked any of the
appropriate logs when you're logged into a console, and if
so, have they told you anything? These and more are
probably questions you'd ask your students and for good
reason: you haven't really given us anything to go on.
-- users mailing list
Saw another thread that selinux was causing Gnome 3 to go back to fallback mode. Machine
was working correctly auto logging in. I have not seen any sealerts, but by using
enforcing=0, machine works correctly thereby confirming my suspicions and the the ones in
the thread, but can't remember which one.
I update the machine on a regular basis and it has worked, but I have to restart it
several times so that X comes up, otherwise it just appears to hang :(
Thanks,
Antonio
10:06 p.m.
On 05/08/2012 08:39 AM, Antonio Olivares wrote:
Dear folks,
For the past week or so, I have a machine running Fedora 16 and X worked fine till a week
or so ago. I have started in level 3 and relabeled everything(in case Selinux has a
problem), but machine still hangs when starting up. I start in level 3 and type startx
and I get Fallback mode (Gnome 3). If I start in gui mode I get a hang and cannot get to
X. Sometimes I am lucky to get X. However booting with enforcing=0, X comes up with no
problem.
I have relabeled filesystem two times already and this continues to happen.
Smolt Profile in case it is important
http://www.smolts.org/client/show/pub_6f209009-0c1d-4fe8-94e9-9dda0d19ac44
Error 503 Service Unavailable
I welcome ideas suggestions and comments. I am hitting this bug on a daily basis as my
students use this machine for school work and it is not working well. My students are
upset at me, because I have to add the extra enforcing=0, when things should just work.
You don't say what video hardware or drivers are in use?
Have you tried "startkde" instead of "startx" from runlevel 3?
You said you saw another thread about selinux and X....but you didn't point to it.
Another pair if eyes reading the same things can be helpful.
--
Never be afraid to laugh at yourself, after all, you could be missing out on the joke
of the century. -- Dame Edna Everage
7:15 a.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 05/07/2012 11:06 PM, Ed Greshko wrote:
On 05/08/2012 08:39 AM, Antonio Olivares wrote:
> Dear folks,
>
> For the past week or so, I have a machine running Fedora 16 and X worked
> fine till a week or so ago. I have started in level 3 and relabeled
> everything(in case Selinux has a problem), but machine still hangs when
> starting up. I start in level 3 and type startx and I get Fallback mode
> (Gnome 3). If I start in gui mode I get a hang and cannot get to X.
> Sometimes I am lucky to get X. However booting with enforcing=0, X comes
> up with no problem.
>
> I have relabeled filesystem two times already and this continues to
> happen.
>
> Smolt Profile in case it is important
>
> http://www.smolts.org/client/show/pub_6f209009-0c1d-4fe8-94e9-9dda0d19ac44
>
Error 503 Service Unavailable
>
> I welcome ideas suggestions and comments. I am hitting this bug on a
> daily basis as my students use this machine for school work and it is not
> working well. My students are upset at me, because I have to add the
> extra enforcing=0, when things should just work.
>
You don't say what video hardware or drivers are in use?
Have you tried "startkde" instead of "startx" from runlevel 3?
You said you saw another thread about selinux and X....but you didn't point
to it. Another pair if eyes reading the same things can be helpful.
Could you attach a compressed "ausearch -i -m avc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk+pDnUACgkQrlYvE4MpobO55gCg6guyVAGpyRHHE6mt+KC9nq3I
fp0An1oQ3mbowSm15n40WGD2LJAjquQd
=+CG7
-----END PGP SIGNATURE-----
9 a.m.
--- On Tue, 5/8/12, Daniel J Walsh <dwalsh(a)redhat.com> wrote:
From: Daniel J Walsh <dwalsh(a)redhat.com>
Subject: Re: X Hang when starting machine
To: "Community support for Fedora users" <users(a)lists.fedoraproject.org>
Date: Tuesday, May 8, 2012, 5:15 AM
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 05/07/2012 11:06 PM, Ed Greshko wrote:
> On 05/08/2012 08:39 AM, Antonio Olivares wrote:
>> Dear folks,
>>
>> For the past week or so, I have a machine running
Fedora 16 and X worked
>> fine till a week or so ago. I have started in
level 3 and relabeled
>> everything(in case Selinux has a problem), but
machine still hangs when
>> starting up. I start in level 3 and type
startx and I get Fallback mode
>> (Gnome 3). If I start in gui mode I get a
hang and cannot get to X.
>> Sometimes I am lucky to get X. However
booting with enforcing=0, X comes
>> up with no problem.
>>
>> I have relabeled filesystem two times already and
this continues to
>> happen.
>>
>> Smolt Profile in case it is important
>>
>> http://www.smolts.org/client/show/pub_6f209009-0c1d-4fe8-94e9-9dda0d19ac44
>
>>
> Error 503 Service Unavailable
>
>>
>> I welcome ideas suggestions and comments. I
am hitting this bug on a
>> daily basis as my students use this machine for
school work and it is not
>> working well. My students are upset at me,
because I have to add the
>> extra enforcing=0, when things should just work.
>>
>
> You don't say what video hardware or drivers are in
use?
>
> Have you tried "startkde" instead of "startx" from
runlevel 3?
>
> You said you saw another thread about selinux and
X....but you didn't point
> to it. Another pair if eyes reading the same things can
be helpful.
>
>
Could you attach a compressed "ausearch -i -m avc"
I have updated another machine and run into the same problem :(
Starting in enforcing=0 works :)
Here is the output of above command
[antonio@localhost ~]$ su -
Password:
[root@localhost ~]# ausearch -i -m avc
----
type=SYSCALL msg=audit(10/05/2011 10:41:15.287:109) : arch=i386 syscall=lsetxattr
success=no exit=-22(Invalid argument) a0=0xe77af68 a1=0x66f5d2 a2=0xe779d58 a3=0x24
items=0 ppid=1940 pid=1947 auid=antonio uid=root gid=root euid=root suid=root fsuid=root
egid=root sgid=root fsgid=root tty=pts1 ses=2 comm=yum exe=/usr/bin/python
subj=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(10/05/2011 10:41:15.287:109) : avc: denied { mac_admin } for
pid=1947 comm=yum capability=mac_admin
scontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=capability2
----
type=SYSCALL msg=audit(10/05/2011 10:45:30.811:127) : arch=i386 syscall=unlinkat
success=yes exit=0 a0=0xd a1=0xbf8df2cb a2=0x0 a3=0x8422dd0 items=0 ppid=1 pid=5449
auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root
tty=(none) ses=unset comm=systemd-logind exe=/lib/systemd/systemd-logind
subj=system_u:system_r:systemd_logind_t:s0 key=(null)
type=AVC msg=audit(10/05/2011 10:45:30.811:127) : avc: denied { unlink } for pid=5449
comm=systemd-logind name=user dev=tmpfs ino=21513
scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:object_r:config_home_t:s0
tclass=file
----
type=SYSCALL msg=audit(10/06/2011 07:30:55.325:63) : arch=i386 syscall=mmap success=no
exit=-13(Permission denied) a0=0xbfbb8f38 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1
pid=1865 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null)
type=AVC msg=audit(10/06/2011 07:30:55.325:63) : avc: denied { mmap_zero } for pid=1865
comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:30:56.017:64) : arch=i386 syscall=mmap success=no
exit=-13(Permission denied) a0=0xbfb2f918 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1
pid=1872 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null)
type=AVC msg=audit(10/06/2011 07:30:56.017:64) : avc: denied { mmap_zero } for pid=1872
comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:30:56.444:65) : arch=i386 syscall=mmap success=no
exit=-13(Permission denied) a0=0xbf832298 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0
ppid=1872 pid=1873 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio
fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null)
type=AVC msg=audit(10/06/2011 07:30:56.444:65) : avc: denied { mmap_zero } for pid=1873
comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:30:56.695:66) : arch=i386 syscall=mmap success=no
exit=-13(Permission denied) a0=0xbf8aeff8 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0
ppid=1872 pid=1876 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio
fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null)
type=AVC msg=audit(10/06/2011 07:30:56.695:66) : avc: denied { mmap_zero } for pid=1876
comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:31:00.839:68) : arch=i386 syscall=mmap success=no
exit=-13(Permission denied) a0=0xbfac3f28 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1
pid=1880 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null)
type=AVC msg=audit(10/06/2011 07:31:00.839:68) : avc: denied { mmap_zero } for pid=1880
comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:31:00.839:67) : arch=i386 syscall=mmap success=no
exit=-13(Permission denied) a0=0xbfed9e88 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1
pid=1879 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null)
type=AVC msg=audit(10/06/2011 07:31:00.839:67) : avc: denied { mmap_zero } for pid=1879
comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:31:10.067:69) : arch=i386 syscall=mmap success=no
exit=-13(Permission denied) a0=0xbfe39b38 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0
ppid=1876 pid=1892 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio
fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null)
type=AVC msg=audit(10/06/2011 07:31:10.067:69) : avc: denied { mmap_zero } for pid=1892
comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:31:45.589:74) : arch=i386 syscall=mmap success=no
exit=-13(Permission denied) a0=0xbf8ac478 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0
ppid=1876 pid=2027 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio
fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null)
type=AVC msg=audit(10/06/2011 07:31:45.589:74) : avc: denied { mmap_zero } for pid=2027
comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:31:46.811:75) : arch=i386 syscall=mmap success=no
exit=-13(Permission denied) a0=0xbfdf4318 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0
ppid=1873 pid=2032 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio
fsuid=antonio egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null)
type=AVC msg=audit(10/06/2011 07:31:46.811:75) : avc: denied { mmap_zero } for pid=2032
comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(10/06/2011 07:31:47.648:76) : arch=i386 syscall=mmap success=no
exit=-13(Permission denied) a0=0xbf813938 a1=0x0 a2=PROT_NONE a3=MAP_FILE items=0 ppid=1
pid=2040 auid=antonio uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null)
type=AVC msg=audit(10/06/2011 07:31:47.648:76) : avc: denied { mmap_zero } for pid=2040
comm=wine-preloader scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
----
type=SYSCALL msg=audit(11/29/2011 07:10:52.252:87) : arch=i386 syscall=open success=no
exit=-13(Permission denied) a0=0x805db18 a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0
items=0 ppid=1 pid=4108 auid=unset uid=root gid=root euid=root suid=root fsuid=root
egid=root sgid=root fsgid=root tty=(none) ses=unset comm=mcelog exe=/usr/sbin/mcelog
subj=system_u:system_r:mcelog_t:s0 key=(null)
type=AVC msg=audit(11/29/2011 07:10:52.252:87) : avc: denied { create } for pid=4108
comm=mcelog name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
tcontext=system_u:object_r:var_run_t:s0 tclass=file
----
type=SYSCALL msg=audit(11/29/2011 00:18:06.277:14) : arch=i386 syscall=open success=no
exit=-13(Permission denied) a0=0x805db18 a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0
items=0 ppid=1 pid=894 auid=unset uid=root gid=root euid=root suid=root fsuid=root
egid=root sgid=root fsgid=root tty=(none) ses=unset comm=mcelog exe=/usr/sbin/mcelog
subj=system_u:system_r:mcelog_t:s0 key=(null)
type=AVC msg=audit(11/29/2011 00:18:06.277:14) : avc: denied { create } for pid=894
comm=mcelog name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
tcontext=system_u:object_r:var_run_t:s0 tclass=file
----
type=SYSCALL msg=audit(12/06/2011 01:54:44.898:13) : arch=i386 syscall=open success=no
exit=-13(Permission denied) a0=0x805db18 a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0
items=0 ppid=1 pid=916 auid=unset uid=root gid=root euid=root suid=root fsuid=root
egid=root sgid=root fsgid=root tty=(none) ses=unset comm=mcelog exe=/usr/sbin/mcelog
subj=system_u:system_r:mcelog_t:s0 key=(null)
type=AVC msg=audit(12/06/2011 01:54:44.898:13) : avc: denied { create } for pid=916
comm=mcelog name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
tcontext=system_u:object_r:var_run_t:s0 tclass=file
I will do the same in the other machine and copy it here inline
Thanks,
Antonio
10:36 a.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 05/08/2012 10:00 AM, Antonio Olivares wrote:
--- On Tue, 5/8/12, Daniel J Walsh <dwalsh(a)redhat.com> wrote:
> From: Daniel J Walsh <dwalsh(a)redhat.com> Subject: Re: X Hang when
> starting machine To: "Community support for Fedora users"
> <users(a)lists.fedoraproject.org> Date: Tuesday, May 8, 2012, 5:15 AM
> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>
> On 05/07/2012 11:06 PM, Ed Greshko wrote:
>> On 05/08/2012 08:39 AM, Antonio Olivares wrote:
>>> Dear folks,
>>>
>>> For the past week or so, I have a machine running
> Fedora 16 and X worked
>>> fine till a week or so ago. I have started in
> level 3 and relabeled
>>> everything(in case Selinux has a problem), but
> machine still hangs when
>>> starting up. I start in level 3 and type
> startx and I get Fallback mode
>>> (Gnome 3). If I start in gui mode I get a
> hang and cannot get to X.
>>> Sometimes I am lucky to get X. However
> booting with enforcing=0, X comes
>>> up with no problem.
>>>
>>> I have relabeled filesystem two times already and
> this continues to
>>> happen.
>>>
>>> Smolt Profile in case it is important
>>>
>>> http://www.smolts.org/client/show/pub_6f209009-0c1d-4fe8-94e9-9dda0d19ac44
>>
>>>
>>
>>>
Error 503 Service Unavailable
>>
>>>
>>> I welcome ideas suggestions and comments. I
> am hitting this bug on a
>>> daily basis as my students use this machine for
> school work and it is not
>>> working well. My students are upset at me,
> because I have to add the
>>> extra enforcing=0, when things should just work.
>>>
>>
>> You don't say what video hardware or drivers are in
> use?
>>
>> Have you tried "startkde" instead of "startx" from
> runlevel 3?
>>
>> You said you saw another thread about selinux and
> X....but you didn't point
>> to it. Another pair if eyes reading the same things can
> be helpful.
>>
>>
> Could you attach a compressed "ausearch -i -m avc"
I have updated another machine and run into the same problem :( Starting in
enforcing=0 works :)
Here is the output of above command
[antonio@localhost ~]$ su - Password: [root@localhost ~]# ausearch -i -m
avc ---- type=SYSCALL msg=audit(10/05/2011 10:41:15.287:109) : arch=i386
syscall=lsetxattr success=no exit=-22(Invalid argument) a0=0xe77af68
a1=0x66f5d2 a2=0xe779d58 a3=0x24 items=0 ppid=1940 pid=1947 auid=antonio
uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root
fsgid=root tty=pts1 ses=2 comm=yum exe=/usr/bin/python
subj=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/05/2011 10:41:15.287:109) : avc: denied { mac_admin } for
pid=1947 comm=yum capability=mac_admin
scontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=capability2
---- type=SYSCALL msg=audit(10/05/2011 10:45:30.811:127) : arch=i386
syscall=unlinkat success=yes exit=0 a0=0xd a1=0xbf8df2cb a2=0x0
a3=0x8422dd0 items=0 ppid=1 pid=5449 auid=unset uid=root gid=root euid=root
suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset
comm=systemd-logind exe=/lib/systemd/systemd-logind
subj=system_u:system_r:systemd_logind_t:s0 key=(null) type=AVC
msg=audit(10/05/2011 10:45:30.811:127) : avc: denied { unlink } for
pid=5449 comm=systemd-logind name=user dev=tmpfs ino=21513
scontext=system_u:system_r:systemd_logind_t:s0
tcontext=system_u:object_r:config_home_t:s0 tclass=file ---- type=SYSCALL
msg=audit(10/06/2011 07:30:55.325:63) : arch=i386 syscall=mmap success=no
exit=-13(Permission denied) a0=0xbfbb8f38 a1=0x0 a2=PROT_NONE a3=MAP_FILE
items=0 ppid=1 pid=1865 auid=antonio uid=antonio gid=antonio euid=antonio
suid=antonio fsuid=antonio egid=antonio sgid=antonio fsgid=antonio
tty=(none) ses=2 comm=wine-preloader exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:30:55.325:63) : avc: denied { mmap_zero } for
pid=1865 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:30:56.017:64) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbfb2f918 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1872 auid=antonio uid=antonio
gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio
sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:30:56.017:64) : avc: denied { mmap_zero } for
pid=1872 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:30:56.444:65) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbf832298 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872 pid=1873 auid=antonio
uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
comm=wine-preloader exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:30:56.444:65) : avc: denied { mmap_zero } for
pid=1873 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:30:56.695:66) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbf8aeff8 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872 pid=1876 auid=antonio
uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
comm=wine-preloader exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:30:56.695:66) : avc: denied { mmap_zero } for
pid=1876 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:31:00.839:68) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbfac3f28 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1880 auid=antonio uid=antonio
gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio
sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:31:00.839:68) : avc: denied { mmap_zero } for
pid=1880 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:31:00.839:67) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbfed9e88 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1879 auid=antonio uid=antonio
gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio
sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:31:00.839:67) : avc: denied { mmap_zero } for
pid=1879 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:31:10.067:69) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbfe39b38 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876 pid=1892 auid=antonio
uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
comm=wine-preloader exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:31:10.067:69) : avc: denied { mmap_zero } for
pid=1892 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:31:45.589:74) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbf8ac478 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876 pid=2027 auid=antonio
uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
comm=wine-preloader exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:31:45.589:74) : avc: denied { mmap_zero } for
pid=2027 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:31:46.811:75) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbfdf4318 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1873 pid=2032 auid=antonio
uid=antonio gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio sgid=antonio fsgid=antonio tty=(none) ses=2
comm=wine-preloader exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:31:46.811:75) : avc: denied { mmap_zero } for
pid=2032 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(10/06/2011 07:31:47.648:76) : arch=i386
syscall=mmap success=no exit=-13(Permission denied) a0=0xbf813938 a1=0x0
a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=2040 auid=antonio uid=antonio
gid=antonio euid=antonio suid=antonio fsuid=antonio egid=antonio
sgid=antonio fsgid=antonio tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 key=(null) type=AVC
msg=audit(10/06/2011 07:31:47.648:76) : avc: denied { mmap_zero } for
pid=2040 comm=wine-preloader
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect
---- type=SYSCALL msg=audit(11/29/2011 07:10:52.252:87) : arch=i386
syscall=open success=no exit=-13(Permission denied) a0=0x805db18
a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0 items=0 ppid=1 pid=4108
auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root
sgid=root fsgid=root tty=(none) ses=unset comm=mcelog exe=/usr/sbin/mcelog
subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC msg=audit(11/29/2011
07:10:52.252:87) : avc: denied { create } for pid=4108 comm=mcelog
name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
tcontext=system_u:object_r:var_run_t:s0 tclass=file ---- type=SYSCALL
msg=audit(11/29/2011 00:18:06.277:14) : arch=i386 syscall=open success=no
exit=-13(Permission denied) a0=0x805db18 a1=O_WRONLY|O_CREAT|O_TRUNC
a2=0x1b6 a3=0x0 items=0 ppid=1 pid=894 auid=unset uid=root gid=root
euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none)
ses=unset comm=mcelog exe=/usr/sbin/mcelog
subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC msg=audit(11/29/2011
00:18:06.277:14) : avc: denied { create } for pid=894 comm=mcelog
name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
tcontext=system_u:object_r:var_run_t:s0 tclass=file ---- type=SYSCALL
msg=audit(12/06/2011 01:54:44.898:13) : arch=i386 syscall=open success=no
exit=-13(Permission denied) a0=0x805db18 a1=O_WRONLY|O_CREAT|O_TRUNC
a2=0x1b6 a3=0x0 items=0 ppid=1 pid=916 auid=unset uid=root gid=root
euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none)
ses=unset comm=mcelog exe=/usr/sbin/mcelog
subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC msg=audit(12/06/2011
01:54:44.898:13) : avc: denied { create } for pid=916 comm=mcelog
name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
tcontext=system_u:object_r:var_run_t:s0 tclass=file
I will do the same in the other machine and copy it here inline
Thanks,
Antonio
rpm -q selinux-policy
selinux-policy-3.10.0-88.fc16
I believe some of these are fixed in the latest policy.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk+pPXsACgkQrlYvE4MpobM1egCgoCvzWyu9yVxwMFsg5UlW3ML7
G2AAoL6g5nmg5xjrsZFIhi0E+a8Aradb
=td5x
-----END PGP SIGNATURE-----
11:35 a.m.
>> Could you attach a compressed "ausearch -i -m
avc"
>
> I have updated another machine and run into the same
problem :( Starting in
> enforcing=0 works :)
>
> Here is the output of above command
>
> [antonio@localhost ~]$ su - Password: [root@localhost
~]# ausearch -i -m
> avc ---- type=SYSCALL msg=audit(10/05/2011
10:41:15.287:109) : arch=i386
> syscall=lsetxattr success=no exit=-22(Invalid argument)
a0=0xe77af68
> a1=0x66f5d2 a2=0xe779d58 a3=0x24 items=0 ppid=1940
pid=1947 auid=antonio
> uid=root gid=root euid=root suid=root fsuid=root
egid=root sgid=root
> fsgid=root tty=pts1 ses=2 comm=yum exe=/usr/bin/python
> subj=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
key=(null) type=AVC
> msg=audit(10/05/2011 10:41:15.287:109) : avc:
denied { mac_admin } for
> pid=1947 comm=yum capability=mac_admin
> scontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
> tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
tclass=capability2
> ---- type=SYSCALL msg=audit(10/05/2011
10:45:30.811:127) : arch=i386
> syscall=unlinkat success=yes exit=0 a0=0xd
a1=0xbf8df2cb a2=0x0
> a3=0x8422dd0 items=0 ppid=1 pid=5449 auid=unset
uid=root gid=root euid=root
> suid=root fsuid=root egid=root sgid=root fsgid=root
tty=(none) ses=unset
> comm=systemd-logind exe=/lib/systemd/systemd-logind
> subj=system_u:system_r:systemd_logind_t:s0 key=(null)
type=AVC
> msg=audit(10/05/2011 10:45:30.811:127) : avc:
denied { unlink } for
> pid=5449 comm=systemd-logind name=user dev=tmpfs
ino=21513
> scontext=system_u:system_r:systemd_logind_t:s0
> tcontext=system_u:object_r:config_home_t:s0 tclass=file
---- type=SYSCALL
> msg=audit(10/06/2011 07:30:55.325:63) : arch=i386
syscall=mmap success=no
> exit=-13(Permission denied) a0=0xbfbb8f38 a1=0x0
a2=PROT_NONE a3=MAP_FILE
> items=0 ppid=1 pid=1865 auid=antonio uid=antonio
gid=antonio euid=antonio
> suid=antonio fsuid=antonio egid=antonio sgid=antonio
fsgid=antonio
> tty=(none) ses=2 comm=wine-preloader
exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null) type=AVC
> msg=audit(10/06/2011 07:30:55.325:63) : avc:
denied { mmap_zero } for
> pid=1865 comm=wine-preloader
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011
07:30:56.017:64) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied)
a0=0xbfb2f918 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1872
auid=antonio uid=antonio
> gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio
> sgid=antonio fsgid=antonio tty=(none) ses=2
comm=wine-preloader
> exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null) type=AVC
> msg=audit(10/06/2011 07:30:56.017:64) : avc:
denied { mmap_zero } for
> pid=1872 comm=wine-preloader
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011
07:30:56.444:65) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied)
a0=0xbf832298 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872 pid=1873
auid=antonio
> uid=antonio gid=antonio euid=antonio suid=antonio
fsuid=antonio
> egid=antonio sgid=antonio fsgid=antonio tty=(none)
ses=2
> comm=wine-preloader exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null) type=AVC
> msg=audit(10/06/2011 07:30:56.444:65) : avc:
denied { mmap_zero } for
> pid=1873 comm=wine-preloader
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011
07:30:56.695:66) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied)
a0=0xbf8aeff8 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872 pid=1876
auid=antonio
> uid=antonio gid=antonio euid=antonio suid=antonio
fsuid=antonio
> egid=antonio sgid=antonio fsgid=antonio tty=(none)
ses=2
> comm=wine-preloader exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null) type=AVC
> msg=audit(10/06/2011 07:30:56.695:66) : avc:
denied { mmap_zero } for
> pid=1876 comm=wine-preloader
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011
07:31:00.839:68) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied)
a0=0xbfac3f28 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1880
auid=antonio uid=antonio
> gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio
> sgid=antonio fsgid=antonio tty=(none) ses=2
comm=wine-preloader
> exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null) type=AVC
> msg=audit(10/06/2011 07:31:00.839:68) : avc:
denied { mmap_zero } for
> pid=1880 comm=wine-preloader
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011
07:31:00.839:67) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied)
a0=0xbfed9e88 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1879
auid=antonio uid=antonio
> gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio
> sgid=antonio fsgid=antonio tty=(none) ses=2
comm=wine-preloader
> exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null) type=AVC
> msg=audit(10/06/2011 07:31:00.839:67) : avc:
denied { mmap_zero } for
> pid=1879 comm=wine-preloader
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011
07:31:10.067:69) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied)
a0=0xbfe39b38 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876 pid=1892
auid=antonio
> uid=antonio gid=antonio euid=antonio suid=antonio
fsuid=antonio
> egid=antonio sgid=antonio fsgid=antonio tty=(none)
ses=2
> comm=wine-preloader exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null) type=AVC
> msg=audit(10/06/2011 07:31:10.067:69) : avc:
denied { mmap_zero } for
> pid=1892 comm=wine-preloader
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011
07:31:45.589:74) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied)
a0=0xbf8ac478 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876 pid=2027
auid=antonio
> uid=antonio gid=antonio euid=antonio suid=antonio
fsuid=antonio
> egid=antonio sgid=antonio fsgid=antonio tty=(none)
ses=2
> comm=wine-preloader exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null) type=AVC
> msg=audit(10/06/2011 07:31:45.589:74) : avc:
denied { mmap_zero } for
> pid=2027 comm=wine-preloader
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011
07:31:46.811:75) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied)
a0=0xbfdf4318 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1873 pid=2032
auid=antonio
> uid=antonio gid=antonio euid=antonio suid=antonio
fsuid=antonio
> egid=antonio sgid=antonio fsgid=antonio tty=(none)
ses=2
> comm=wine-preloader exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null) type=AVC
> msg=audit(10/06/2011 07:31:46.811:75) : avc:
denied { mmap_zero } for
> pid=2032 comm=wine-preloader
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tclass=memprotect
> ---- type=SYSCALL msg=audit(10/06/2011
07:31:47.648:76) : arch=i386
> syscall=mmap success=no exit=-13(Permission denied)
a0=0xbf813938 a1=0x0
> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=2040
auid=antonio uid=antonio
> gid=antonio euid=antonio suid=antonio fsuid=antonio
egid=antonio
> sgid=antonio fsgid=antonio tty=(none) ses=2
comm=wine-preloader
> exe=/usr/bin/wine-preloader
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
key=(null) type=AVC
> msg=audit(10/06/2011 07:31:47.648:76) : avc:
denied { mmap_zero } for
> pid=2040 comm=wine-preloader
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
tclass=memprotect
> ---- type=SYSCALL msg=audit(11/29/2011
07:10:52.252:87) : arch=i386
> syscall=open success=no exit=-13(Permission denied)
a0=0x805db18
> a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0 items=0
ppid=1 pid=4108
> auid=unset uid=root gid=root euid=root suid=root
fsuid=root egid=root
> sgid=root fsgid=root tty=(none) ses=unset comm=mcelog
exe=/usr/sbin/mcelog
> subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC
msg=audit(11/29/2011
> 07:10:52.252:87) : avc: denied { create }
for pid=4108 comm=mcelog
> name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
> tcontext=system_u:object_r:var_run_t:s0 tclass=file
---- type=SYSCALL
> msg=audit(11/29/2011 00:18:06.277:14) : arch=i386
syscall=open success=no
> exit=-13(Permission denied) a0=0x805db18
a1=O_WRONLY|O_CREAT|O_TRUNC
> a2=0x1b6 a3=0x0 items=0 ppid=1 pid=894 auid=unset
uid=root gid=root
> euid=root suid=root fsuid=root egid=root sgid=root
fsgid=root tty=(none)
> ses=unset comm=mcelog exe=/usr/sbin/mcelog
> subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC
msg=audit(11/29/2011
> 00:18:06.277:14) : avc: denied { create }
for pid=894 comm=mcelog
> name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
> tcontext=system_u:object_r:var_run_t:s0 tclass=file
---- type=SYSCALL
> msg=audit(12/06/2011 01:54:44.898:13) : arch=i386
syscall=open success=no
> exit=-13(Permission denied) a0=0x805db18
a1=O_WRONLY|O_CREAT|O_TRUNC
> a2=0x1b6 a3=0x0 items=0 ppid=1 pid=916 auid=unset
uid=root gid=root
> euid=root suid=root fsuid=root egid=root sgid=root
fsgid=root tty=(none)
> ses=unset comm=mcelog exe=/usr/sbin/mcelog
> subj=system_u:system_r:mcelog_t:s0 key=(null) type=AVC
msg=audit(12/06/2011
> 01:54:44.898:13) : avc: denied { create }
for pid=916 comm=mcelog
> name=mcelog.pid scontext=system_u:system_r:mcelog_t:s0
> tcontext=system_u:object_r:var_run_t:s0 tclass=file
>
> I will do the same in the other machine and copy it
here inline
>
>
> Thanks,
>
>
> Antonio
rpm -q selinux-policy
selinux-policy-3.10.0-88.fc16
I believe some of these are fixed in the latest policy.
[students@localhost ~]$ rpm -q selinux-policy
selinux-policy-3.10.0-86.fc16.noarch
Thanks,
Antonio
11:49 a.m.
--- On Tue, 5/8/12, Antonio Olivares <olivares14031(a)yahoo.com> wrote:
From: Antonio Olivares <olivares14031(a)yahoo.com>
Subject: Re: X Hang when starting machine
To: "Community support for Fedora users" <users(a)lists.fedoraproject.org>,
"Daniel J Walsh" <dwalsh(a)redhat.com>
Date: Tuesday, May 8, 2012, 9:35 AM
> >> Could you attach a compressed "ausearch -i -m
avc"
> >
> > I have updated another machine and run into the
same
> problem :( Starting in
> > enforcing=0 works :)
> >
> > Here is the output of above command
> >
> > [antonio@localhost ~]$ su - Password:
[root@localhost
> ~]# ausearch -i -m
> > avc ---- type=SYSCALL msg=audit(10/05/2011
> 10:41:15.287:109) : arch=i386
> > syscall=lsetxattr success=no exit=-22(Invalid
argument)
> a0=0xe77af68
> > a1=0x66f5d2 a2=0xe779d58 a3=0x24 items=0
ppid=1940
> pid=1947 auid=antonio
> > uid=root gid=root euid=root suid=root fsuid=root
> egid=root sgid=root
> > fsgid=root tty=pts1 ses=2 comm=yum
exe=/usr/bin/python
> > subj=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/05/2011 10:41:15.287:109) : avc:
> denied { mac_admin } for
> > pid=1947 comm=yum capability=mac_admin
> >
scontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
> >
tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
> tclass=capability2
> > ---- type=SYSCALL msg=audit(10/05/2011
> 10:45:30.811:127) : arch=i386
> > syscall=unlinkat success=yes exit=0 a0=0xd
> a1=0xbf8df2cb a2=0x0
> > a3=0x8422dd0 items=0 ppid=1 pid=5449 auid=unset
> uid=root gid=root euid=root
> > suid=root fsuid=root egid=root sgid=root
fsgid=root
> tty=(none) ses=unset
> > comm=systemd-logind
exe=/lib/systemd/systemd-logind
> > subj=system_u:system_r:systemd_logind_t:s0
key=(null)
> type=AVC
> > msg=audit(10/05/2011 10:45:30.811:127) : avc:
> denied { unlink } for
> > pid=5449 comm=systemd-logind name=user dev=tmpfs
> ino=21513
> > scontext=system_u:system_r:systemd_logind_t:s0
> > tcontext=system_u:object_r:config_home_t:s0
tclass=file
> ---- type=SYSCALL
> > msg=audit(10/06/2011 07:30:55.325:63) : arch=i386
> syscall=mmap success=no
> > exit=-13(Permission denied) a0=0xbfbb8f38 a1=0x0
> a2=PROT_NONE a3=MAP_FILE
> > items=0 ppid=1 pid=1865 auid=antonio uid=antonio
> gid=antonio euid=antonio
> > suid=antonio fsuid=antonio egid=antonio
sgid=antonio
> fsgid=antonio
> > tty=(none) ses=2 comm=wine-preloader
> exe=/usr/bin/wine-preloader
> >
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:30:55.325:63) : avc:
> denied { mmap_zero } for
> > pid=1865 comm=wine-preloader
> >
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> > ---- type=SYSCALL msg=audit(10/06/2011
> 07:30:56.017:64) : arch=i386
> > syscall=mmap success=no exit=-13(Permission
denied)
> a0=0xbfb2f918 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1872
> auid=antonio uid=antonio
> > gid=antonio euid=antonio suid=antonio
fsuid=antonio
> egid=antonio
> > sgid=antonio fsgid=antonio tty=(none) ses=2
> comm=wine-preloader
> > exe=/usr/bin/wine-preloader
> >
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:30:56.017:64) : avc:
> denied { mmap_zero } for
> > pid=1872 comm=wine-preloader
> >
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> > ---- type=SYSCALL msg=audit(10/06/2011
> 07:30:56.444:65) : arch=i386
> > syscall=mmap success=no exit=-13(Permission
denied)
> a0=0xbf832298 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872
pid=1873
> auid=antonio
> > uid=antonio gid=antonio euid=antonio suid=antonio
> fsuid=antonio
> > egid=antonio sgid=antonio fsgid=antonio
tty=(none)
> ses=2
> > comm=wine-preloader exe=/usr/bin/wine-preloader
> >
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:30:56.444:65) : avc:
> denied { mmap_zero } for
> > pid=1873 comm=wine-preloader
> >
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> > ---- type=SYSCALL msg=audit(10/06/2011
> 07:30:56.695:66) : arch=i386
> > syscall=mmap success=no exit=-13(Permission
denied)
> a0=0xbf8aeff8 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872
pid=1876
> auid=antonio
> > uid=antonio gid=antonio euid=antonio suid=antonio
> fsuid=antonio
> > egid=antonio sgid=antonio fsgid=antonio
tty=(none)
> ses=2
> > comm=wine-preloader exe=/usr/bin/wine-preloader
> >
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:30:56.695:66) : avc:
> denied { mmap_zero } for
> > pid=1876 comm=wine-preloader
> >
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> > ---- type=SYSCALL msg=audit(10/06/2011
> 07:31:00.839:68) : arch=i386
> > syscall=mmap success=no exit=-13(Permission
denied)
> a0=0xbfac3f28 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1880
> auid=antonio uid=antonio
> > gid=antonio euid=antonio suid=antonio
fsuid=antonio
> egid=antonio
> > sgid=antonio fsgid=antonio tty=(none) ses=2
> comm=wine-preloader
> > exe=/usr/bin/wine-preloader
> >
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:31:00.839:68) : avc:
> denied { mmap_zero } for
> > pid=1880 comm=wine-preloader
> >
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> > ---- type=SYSCALL msg=audit(10/06/2011
> 07:31:00.839:67) : arch=i386
> > syscall=mmap success=no exit=-13(Permission
denied)
> a0=0xbfed9e88 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1879
> auid=antonio uid=antonio
> > gid=antonio euid=antonio suid=antonio
fsuid=antonio
> egid=antonio
> > sgid=antonio fsgid=antonio tty=(none) ses=2
> comm=wine-preloader
> > exe=/usr/bin/wine-preloader
> >
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:31:00.839:67) : avc:
> denied { mmap_zero } for
> > pid=1879 comm=wine-preloader
> >
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> > ---- type=SYSCALL msg=audit(10/06/2011
> 07:31:10.067:69) : arch=i386
> > syscall=mmap success=no exit=-13(Permission
denied)
> a0=0xbfe39b38 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876
pid=1892
> auid=antonio
> > uid=antonio gid=antonio euid=antonio suid=antonio
> fsuid=antonio
> > egid=antonio sgid=antonio fsgid=antonio
tty=(none)
> ses=2
> > comm=wine-preloader exe=/usr/bin/wine-preloader
> >
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:31:10.067:69) : avc:
> denied { mmap_zero } for
> > pid=1892 comm=wine-preloader
> >
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> > ---- type=SYSCALL msg=audit(10/06/2011
> 07:31:45.589:74) : arch=i386
> > syscall=mmap success=no exit=-13(Permission
denied)
> a0=0xbf8ac478 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876
pid=2027
> auid=antonio
> > uid=antonio gid=antonio euid=antonio suid=antonio
> fsuid=antonio
> > egid=antonio sgid=antonio fsgid=antonio
tty=(none)
> ses=2
> > comm=wine-preloader exe=/usr/bin/wine-preloader
> >
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:31:45.589:74) : avc:
> denied { mmap_zero } for
> > pid=2027 comm=wine-preloader
> >
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> > ---- type=SYSCALL msg=audit(10/06/2011
> 07:31:46.811:75) : arch=i386
> > syscall=mmap success=no exit=-13(Permission
denied)
> a0=0xbfdf4318 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1873
pid=2032
> auid=antonio
> > uid=antonio gid=antonio euid=antonio suid=antonio
> fsuid=antonio
> > egid=antonio sgid=antonio fsgid=antonio
tty=(none)
> ses=2
> > comm=wine-preloader exe=/usr/bin/wine-preloader
> >
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:31:46.811:75) : avc:
> denied { mmap_zero } for
> > pid=2032 comm=wine-preloader
> >
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> > ---- type=SYSCALL msg=audit(10/06/2011
> 07:31:47.648:76) : arch=i386
> > syscall=mmap success=no exit=-13(Permission
denied)
> a0=0xbf813938 a1=0x0
> > a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=2040
> auid=antonio uid=antonio
> > gid=antonio euid=antonio suid=antonio
fsuid=antonio
> egid=antonio
> > sgid=antonio fsgid=antonio tty=(none) ses=2
> comm=wine-preloader
> > exe=/usr/bin/wine-preloader
> >
subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> key=(null) type=AVC
> > msg=audit(10/06/2011 07:31:47.648:76) : avc:
> denied { mmap_zero } for
> > pid=2040 comm=wine-preloader
> >
>
scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> >
>
tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
> tclass=memprotect
> > ---- type=SYSCALL msg=audit(11/29/2011
> 07:10:52.252:87) : arch=i386
> > syscall=open success=no exit=-13(Permission
denied)
> a0=0x805db18
> > a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0
items=0
> ppid=1 pid=4108
> > auid=unset uid=root gid=root euid=root suid=root
> fsuid=root egid=root
> > sgid=root fsgid=root tty=(none) ses=unset
comm=mcelog
> exe=/usr/sbin/mcelog
> > subj=system_u:system_r:mcelog_t:s0 key=(null)
type=AVC
> msg=audit(11/29/2011
> > 07:10:52.252:87) : avc: denied { create }
> for pid=4108 comm=mcelog
> > name=mcelog.pid
scontext=system_u:system_r:mcelog_t:s0
> > tcontext=system_u:object_r:var_run_t:s0
tclass=file
> ---- type=SYSCALL
> > msg=audit(11/29/2011 00:18:06.277:14) : arch=i386
> syscall=open success=no
> > exit=-13(Permission denied) a0=0x805db18
> a1=O_WRONLY|O_CREAT|O_TRUNC
> > a2=0x1b6 a3=0x0 items=0 ppid=1 pid=894 auid=unset
> uid=root gid=root
> > euid=root suid=root fsuid=root egid=root
sgid=root
> fsgid=root tty=(none)
> > ses=unset comm=mcelog exe=/usr/sbin/mcelog
> > subj=system_u:system_r:mcelog_t:s0 key=(null)
type=AVC
> msg=audit(11/29/2011
> > 00:18:06.277:14) : avc: denied { create }
> for pid=894 comm=mcelog
> > name=mcelog.pid
scontext=system_u:system_r:mcelog_t:s0
> > tcontext=system_u:object_r:var_run_t:s0
tclass=file
> ---- type=SYSCALL
> > msg=audit(12/06/2011 01:54:44.898:13) : arch=i386
> syscall=open success=no
> > exit=-13(Permission denied) a0=0x805db18
> a1=O_WRONLY|O_CREAT|O_TRUNC
> > a2=0x1b6 a3=0x0 items=0 ppid=1 pid=916 auid=unset
> uid=root gid=root
> > euid=root suid=root fsuid=root egid=root
sgid=root
> fsgid=root tty=(none)
> > ses=unset comm=mcelog exe=/usr/sbin/mcelog
> > subj=system_u:system_r:mcelog_t:s0 key=(null)
type=AVC
> msg=audit(12/06/2011
> > 01:54:44.898:13) : avc: denied { create }
> for pid=916 comm=mcelog
> > name=mcelog.pid
scontext=system_u:system_r:mcelog_t:s0
> > tcontext=system_u:object_r:var_run_t:s0
tclass=file
> >
> > I will do the same in the other machine and copy
it
> here inline
> >
> >
> > Thanks,
> >
> >
> > Antonio
>
> rpm -q selinux-policy
> selinux-policy-3.10.0-88.fc16
>
> I believe some of these are fixed in the latest
policy.
>
[students@localhost ~]$ rpm -q selinux-policy
selinux-policy-3.10.0-86.fc16.noarch
Thanks,
Antonio
--
But updates do not show your new -88 policy :(
Loaded plugins: langpacks, presto, refresh-packagekit
Cleaning repos: adobe-linux-x86_64 fedora updates updates-testing
Cleaning up Everything
No delta-package files removed by presto
Loaded plugins: langpacks, presto, refresh-packagekit
Cleaning repos: adobe-linux-x86_64 fedora updates updates-testing
0 metadata files removed
0 sqlite files removed
0 metadata files removed
Loaded plugins: langpacks, presto, refresh-packagekit
adobe-linux-x86_64 | 951 B 00:00
adobe-linux-x86_64/primary | 1.2 kB 00:00
fedora/metalink | 21 kB 00:00
fedora | 4.2 kB 00:00
fedora/primary_db | 14 MB 02:15
fedora/group_gz | 431 kB 00:01
updates/metalink | 16 kB 00:00
updates | 4.5 kB 00:00
updates/primary_db | 6.1 MB 00:16
updates/group_gz | 435 kB 00:01
updates-testing/metalink | 15 kB 00:00
updates-testing | 4.5 kB 00:00
updates-testing/primary_db | 1.2 MB 00:05
updates-testing/group_gz | 435 kB 00:01
adobe-linux-x86_64 2/2
No Packages marked for Update
Regards,
Antonio
11:59 a.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 05/08/2012 12:49 PM, Antonio Olivares wrote:
--- On Tue, 5/8/12, Antonio Olivares <olivares14031(a)yahoo.com> wrote:
> From: Antonio Olivares <olivares14031(a)yahoo.com> Subject: Re: X Hang when
> starting machine To: "Community support for Fedora users"
> <users(a)lists.fedoraproject.org>, "Daniel J Walsh"
<dwalsh(a)redhat.com>
> Date: Tuesday, May 8, 2012, 9:35 AM
>
>>>> Could you attach a compressed "ausearch -i -m
> avc"
>>>
>>> I have updated another machine and run into the
> same
>> problem :( Starting in
>>> enforcing=0 works :)
>>>
>>> Here is the output of above command
>>>
>>> [antonio@localhost ~]$ su - Password:
> [root@localhost
>> ~]# ausearch -i -m
>>> avc ---- type=SYSCALL msg=audit(10/05/2011
>> 10:41:15.287:109) : arch=i386
>>> syscall=lsetxattr success=no exit=-22(Invalid
> argument)
>> a0=0xe77af68
>>> a1=0x66f5d2 a2=0xe779d58 a3=0x24 items=0
> ppid=1940
>> pid=1947 auid=antonio
>>> uid=root gid=root euid=root suid=root fsuid=root
>> egid=root sgid=root
>>> fsgid=root tty=pts1 ses=2 comm=yum
> exe=/usr/bin/python
>>> subj=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
>> key=(null) type=AVC
>>> msg=audit(10/05/2011 10:41:15.287:109) : avc:
>> denied { mac_admin } for
>>> pid=1947 comm=yum capability=mac_admin
>>>
> scontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
>>>
> tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023
>> tclass=capability2
>>> ---- type=SYSCALL msg=audit(10/05/2011
>> 10:45:30.811:127) : arch=i386
>>> syscall=unlinkat success=yes exit=0 a0=0xd
>> a1=0xbf8df2cb a2=0x0
>>> a3=0x8422dd0 items=0 ppid=1 pid=5449 auid=unset
>> uid=root gid=root euid=root
>>> suid=root fsuid=root egid=root sgid=root
> fsgid=root
>> tty=(none) ses=unset
>>> comm=systemd-logind
> exe=/lib/systemd/systemd-logind
>>> subj=system_u:system_r:systemd_logind_t:s0
> key=(null)
>> type=AVC
>>> msg=audit(10/05/2011 10:45:30.811:127) : avc:
>> denied { unlink } for
>>> pid=5449 comm=systemd-logind name=user dev=tmpfs
>> ino=21513
>>> scontext=system_u:system_r:systemd_logind_t:s0
>>> tcontext=system_u:object_r:config_home_t:s0
> tclass=file
>> ---- type=SYSCALL
>>> msg=audit(10/06/2011 07:30:55.325:63) : arch=i386
>> syscall=mmap success=no
>>> exit=-13(Permission denied) a0=0xbfbb8f38 a1=0x0
>> a2=PROT_NONE a3=MAP_FILE
>>> items=0 ppid=1 pid=1865 auid=antonio uid=antonio
>> gid=antonio euid=antonio
>>> suid=antonio fsuid=antonio egid=antonio
> sgid=antonio
>> fsgid=antonio
>>> tty=(none) ses=2 comm=wine-preloader
>> exe=/usr/bin/wine-preloader
>>>
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> key=(null) type=AVC
>>> msg=audit(10/06/2011 07:30:55.325:63) : avc:
>> denied { mmap_zero } for
>>> pid=1865 comm=wine-preloader
>>>
>>
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>
>>
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> tclass=memprotect
>>> ---- type=SYSCALL msg=audit(10/06/2011
>> 07:30:56.017:64) : arch=i386
>>> syscall=mmap success=no exit=-13(Permission
> denied)
>> a0=0xbfb2f918 a1=0x0
>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1872
>> auid=antonio uid=antonio
>>> gid=antonio euid=antonio suid=antonio
> fsuid=antonio
>> egid=antonio
>>> sgid=antonio fsgid=antonio tty=(none) ses=2
>> comm=wine-preloader
>>> exe=/usr/bin/wine-preloader
>>>
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> key=(null) type=AVC
>>> msg=audit(10/06/2011 07:30:56.017:64) : avc:
>> denied { mmap_zero } for
>>> pid=1872 comm=wine-preloader
>>>
>>
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>
>>
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> tclass=memprotect
>>> ---- type=SYSCALL msg=audit(10/06/2011
>> 07:30:56.444:65) : arch=i386
>>> syscall=mmap success=no exit=-13(Permission
> denied)
>> a0=0xbf832298 a1=0x0
>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872
> pid=1873
>> auid=antonio
>>> uid=antonio gid=antonio euid=antonio suid=antonio
>> fsuid=antonio
>>> egid=antonio sgid=antonio fsgid=antonio
> tty=(none)
>> ses=2
>>> comm=wine-preloader exe=/usr/bin/wine-preloader
>>>
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> key=(null) type=AVC
>>> msg=audit(10/06/2011 07:30:56.444:65) : avc:
>> denied { mmap_zero } for
>>> pid=1873 comm=wine-preloader
>>>
>>
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>
>>
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> tclass=memprotect
>>> ---- type=SYSCALL msg=audit(10/06/2011
>> 07:30:56.695:66) : arch=i386
>>> syscall=mmap success=no exit=-13(Permission
> denied)
>> a0=0xbf8aeff8 a1=0x0
>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1872
> pid=1876
>> auid=antonio
>>> uid=antonio gid=antonio euid=antonio suid=antonio
>> fsuid=antonio
>>> egid=antonio sgid=antonio fsgid=antonio
> tty=(none)
>> ses=2
>>> comm=wine-preloader exe=/usr/bin/wine-preloader
>>>
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> key=(null) type=AVC
>>> msg=audit(10/06/2011 07:30:56.695:66) : avc:
>> denied { mmap_zero } for
>>> pid=1876 comm=wine-preloader
>>>
>>
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>
>>
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> tclass=memprotect
>>> ---- type=SYSCALL msg=audit(10/06/2011
>> 07:31:00.839:68) : arch=i386
>>> syscall=mmap success=no exit=-13(Permission
> denied)
>> a0=0xbfac3f28 a1=0x0
>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1880
>> auid=antonio uid=antonio
>>> gid=antonio euid=antonio suid=antonio
> fsuid=antonio
>> egid=antonio
>>> sgid=antonio fsgid=antonio tty=(none) ses=2
>> comm=wine-preloader
>>> exe=/usr/bin/wine-preloader
>>>
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> key=(null) type=AVC
>>> msg=audit(10/06/2011 07:31:00.839:68) : avc:
>> denied { mmap_zero } for
>>> pid=1880 comm=wine-preloader
>>>
>>
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>
>>
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> tclass=memprotect
>>> ---- type=SYSCALL msg=audit(10/06/2011
>> 07:31:00.839:67) : arch=i386
>>> syscall=mmap success=no exit=-13(Permission
> denied)
>> a0=0xbfed9e88 a1=0x0
>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=1879
>> auid=antonio uid=antonio
>>> gid=antonio euid=antonio suid=antonio
> fsuid=antonio
>> egid=antonio
>>> sgid=antonio fsgid=antonio tty=(none) ses=2
>> comm=wine-preloader
>>> exe=/usr/bin/wine-preloader
>>>
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> key=(null) type=AVC
>>> msg=audit(10/06/2011 07:31:00.839:67) : avc:
>> denied { mmap_zero } for
>>> pid=1879 comm=wine-preloader
>>>
>>
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>
>>
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> tclass=memprotect
>>> ---- type=SYSCALL msg=audit(10/06/2011
>> 07:31:10.067:69) : arch=i386
>>> syscall=mmap success=no exit=-13(Permission
> denied)
>> a0=0xbfe39b38 a1=0x0
>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876
> pid=1892
>> auid=antonio
>>> uid=antonio gid=antonio euid=antonio suid=antonio
>> fsuid=antonio
>>> egid=antonio sgid=antonio fsgid=antonio
> tty=(none)
>> ses=2
>>> comm=wine-preloader exe=/usr/bin/wine-preloader
>>>
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> key=(null) type=AVC
>>> msg=audit(10/06/2011 07:31:10.067:69) : avc:
>> denied { mmap_zero } for
>>> pid=1892 comm=wine-preloader
>>>
>>
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>
>>
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> tclass=memprotect
>>> ---- type=SYSCALL msg=audit(10/06/2011
>> 07:31:45.589:74) : arch=i386
>>> syscall=mmap success=no exit=-13(Permission
> denied)
>> a0=0xbf8ac478 a1=0x0
>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1876
> pid=2027
>> auid=antonio
>>> uid=antonio gid=antonio euid=antonio suid=antonio
>> fsuid=antonio
>>> egid=antonio sgid=antonio fsgid=antonio
> tty=(none)
>> ses=2
>>> comm=wine-preloader exe=/usr/bin/wine-preloader
>>>
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> key=(null) type=AVC
>>> msg=audit(10/06/2011 07:31:45.589:74) : avc:
>> denied { mmap_zero } for
>>> pid=2027 comm=wine-preloader
>>>
>>
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>
>>
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> tclass=memprotect
>>> ---- type=SYSCALL msg=audit(10/06/2011
>> 07:31:46.811:75) : arch=i386
>>> syscall=mmap success=no exit=-13(Permission
> denied)
>> a0=0xbfdf4318 a1=0x0
>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1873
> pid=2032
>> auid=antonio
>>> uid=antonio gid=antonio euid=antonio suid=antonio
>> fsuid=antonio
>>> egid=antonio sgid=antonio fsgid=antonio
> tty=(none)
>> ses=2
>>> comm=wine-preloader exe=/usr/bin/wine-preloader
>>>
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> key=(null) type=AVC
>>> msg=audit(10/06/2011 07:31:46.811:75) : avc:
>> denied { mmap_zero } for
>>> pid=2032 comm=wine-preloader
>>>
>>
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>
>>
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> tclass=memprotect
>>> ---- type=SYSCALL msg=audit(10/06/2011
>> 07:31:47.648:76) : arch=i386
>>> syscall=mmap success=no exit=-13(Permission
> denied)
>> a0=0xbf813938 a1=0x0
>>> a2=PROT_NONE a3=MAP_FILE items=0 ppid=1 pid=2040
>> auid=antonio uid=antonio
>>> gid=antonio euid=antonio suid=antonio
> fsuid=antonio
>> egid=antonio
>>> sgid=antonio fsgid=antonio tty=(none) ses=2
>> comm=wine-preloader
>>> exe=/usr/bin/wine-preloader
>>>
> subj=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> key=(null) type=AVC
>>> msg=audit(10/06/2011 07:31:47.648:76) : avc:
>> denied { mmap_zero } for
>>> pid=2040 comm=wine-preloader
>>>
>>
> scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>>>
>>
> tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023
>> tclass=memprotect
>>> ---- type=SYSCALL msg=audit(11/29/2011
>> 07:10:52.252:87) : arch=i386
>>> syscall=open success=no exit=-13(Permission
> denied)
>> a0=0x805db18
>>> a1=O_WRONLY|O_CREAT|O_TRUNC a2=0x1b6 a3=0x0
> items=0
>> ppid=1 pid=4108
>>> auid=unset uid=root gid=root euid=root suid=root
>> fsuid=root egid=root
>>> sgid=root fsgid=root tty=(none) ses=unset
> comm=mcelog
>> exe=/usr/sbin/mcelog
>>> subj=system_u:system_r:mcelog_t:s0 key=(null)
> type=AVC
>> msg=audit(11/29/2011
>>> 07:10:52.252:87) : avc: denied { create }
>> for pid=4108 comm=mcelog
>>> name=mcelog.pid
> scontext=system_u:system_r:mcelog_t:s0
>>> tcontext=system_u:object_r:var_run_t:s0
> tclass=file
>> ---- type=SYSCALL
>>> msg=audit(11/29/2011 00:18:06.277:14) : arch=i386
>> syscall=open success=no
>>> exit=-13(Permission denied) a0=0x805db18
>> a1=O_WRONLY|O_CREAT|O_TRUNC
>>> a2=0x1b6 a3=0x0 items=0 ppid=1 pid=894 auid=unset
>> uid=root gid=root
>>> euid=root suid=root fsuid=root egid=root
> sgid=root
>> fsgid=root tty=(none)
>>> ses=unset comm=mcelog exe=/usr/sbin/mcelog
>>> subj=system_u:system_r:mcelog_t:s0 key=(null)
> type=AVC
>> msg=audit(11/29/2011
>>> 00:18:06.277:14) : avc: denied { create }
>> for pid=894 comm=mcelog
>>> name=mcelog.pid
> scontext=system_u:system_r:mcelog_t:s0
>>> tcontext=system_u:object_r:var_run_t:s0
> tclass=file
>> ---- type=SYSCALL
>>> msg=audit(12/06/2011 01:54:44.898:13) : arch=i386
>> syscall=open success=no
>>> exit=-13(Permission denied) a0=0x805db18
>> a1=O_WRONLY|O_CREAT|O_TRUNC
>>> a2=0x1b6 a3=0x0 items=0 ppid=1 pid=916 auid=unset
>> uid=root gid=root
>>> euid=root suid=root fsuid=root egid=root
> sgid=root
>> fsgid=root tty=(none)
>>> ses=unset comm=mcelog exe=/usr/sbin/mcelog
>>> subj=system_u:system_r:mcelog_t:s0 key=(null)
> type=AVC
>> msg=audit(12/06/2011
>>> 01:54:44.898:13) : avc: denied { create }
>> for pid=916 comm=mcelog
>>> name=mcelog.pid
> scontext=system_u:system_r:mcelog_t:s0
>>> tcontext=system_u:object_r:var_run_t:s0
> tclass=file
>>>
>>> I will do the same in the other machine and copy
> it
>> here inline
>>>
>>>
>>> Thanks,
>>>
>>>
>>> Antonio
>>
>> rpm -q selinux-policy selinux-policy-3.10.0-88.fc16
>>
>> I believe some of these are fixed in the latest
> policy.
>>
>
> [students@localhost ~]$ rpm -q selinux-policy
> selinux-policy-3.10.0-86.fc16.noarch
>
> Thanks,
>
>
> Antonio --
But updates do not show your new -88 policy :(
Loaded plugins: langpacks, presto, refresh-packagekit Cleaning repos:
adobe-linux-x86_64 fedora updates updates-testing Cleaning up Everything No
delta-package files removed by presto Loaded plugins: langpacks, presto,
refresh-packagekit Cleaning repos: adobe-linux-x86_64 fedora updates
updates-testing 0 metadata files removed 0 sqlite files removed 0 metadata
files removed Loaded plugins: langpacks, presto, refresh-packagekit
adobe-linux-x86_64 | 951 B 00:00
adobe-linux-x86_64/primary | 1.2 kB
00:00 fedora/metalink | 21 kB
00:00 fedora | 4.2 kB
00:00 fedora/primary_db | 14 MB
02:15 fedora/group_gz | 431 kB
00:01 updates/metalink | 16 kB
00:00 updates | 4.5 kB
00:00 updates/primary_db | 6.1 MB
00:16 updates/group_gz | 435 kB
00:01 updates-testing/metalink | 15 kB
00:00 updates-testing | 4.5 kB
00:00 updates-testing/primary_db | 1.2 MB
00:05 updates-testing/group_gz | 435 kB
00:01 adobe-linux-x86_64
2/2 No Packages marked for Update
Regards,
Antonio
Yes 86 is the only one in testing right now. 88 will be next.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk+pUQUACgkQrlYvE4MpobPoNwCgoUw4MAoeirKqiYwpB3mwMEPb
UPoAoL8e6COhZcOuKL+rqpUklmbViAi7
=ZEPZ
-----END PGP SIGNATURE-----
4:52 p.m.
On 05/09/2012 12:59 AM, Daniel J Walsh wrote:
Yes 86 is the only one in testing right now. 88 will be next.
One of you may want to invest in trimming posts..... My scroll wheel is wearing
out. :-) :-)
--
Never be afraid to laugh at yourself, after all, you could be missing out on the joke
of the century. -- Dame Edna Everage
4400
days inactive
4400
days old
10 comments
4 participants
participants (4)
-
Antonio Olivares -
Daniel J Walsh -
Ed Greshko -
Joe Zeff