Hi guys, I am finishing a brand new Selinux install. I have still 3 avc denied message types when i boot up on enforcing mode. I hope anyone could help me in understanding why they are showing up ... i m quite a newbie so please be kind with me ;-).
- the first denied concerns init running on system_u:system_r:init_t context , trying to do a getcap on a process class object with context system_u:system_r:init_t - the second denieds concerns processes run from modules-update script (id,mv,cp ..) scontext=system_u:system_r:update_modules_t trying to search directories like /var /usr etc .... : i had a look @ modutil.te and there is a bunch of dontaudit which seems to take care of this. Why do i see those denied then ? is it a well-known bug ? - the last denieds are issued by unix_chkpwd scontext=system_u:system_r:system_chkpwd_t tcontext=root:object_r:sysadm_tty_device_t tclass=chr_file Thanks in advance Regards Sebastien. -- [email protected] mailing list
