Re: [CentOS] SELinux is preventing /usr/bin/chcon "mac_admin" access

2011-12-20 Thread James B. Byrne
On Tue, December 20, 2011 14:42, Daniel J Walsh wrote: > > On 12/20/2011 07:33 PM, James B. Byrne wrote: >> >> # grep -R chcon /etc/rc.d # ps -eZ | grep initrc >> system_u:system_r:initrc_t:s01211 ?00:00:01 >> miniserv.pl >> >> No chcon found in /etc/rc.d >> >> miniserv.pl is the Webmi

Re: [CentOS] SELinux is preventing /usr/bin/chcon "mac_admin" access

2011-12-20 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/20/2011 07:33 PM, James B. Byrne wrote: > > On Tue, December 20, 2011 13:40, Daniel J Walsh wrote: > >>> >> >> grep -R chcon /etc/rc.d >> >> Would be an easier way to do this... >> >> ps -eZ | grep initrc >> > # grep -R chcon /etc/rc.d # p

Re: [CentOS] SELinux is preventing /usr/bin/chcon "mac_admin" access

2011-12-20 Thread James B. Byrne
On Tue, December 20, 2011 13:40, Daniel J Walsh wrote: >> > > grep -R chcon /etc/rc.d > > Would be an easier way to do this... > > ps -eZ | grep initrc > # grep -R chcon /etc/rc.d # ps -eZ | grep initrc system_u:system_r:initrc_t:s01211 ?00:00:01 miniserv.pl No chcon found in /etc/rc

Re: [CentOS] SELinux is preventing /usr/bin/chcon "mac_admin" access

2011-12-20 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/20/2011 04:55 PM, James B. Byrne wrote: > > On Tue, December 20, 2011 09:49, Daniel J Walsh wrote: > >> >> This means somebody is executing a chcon with a context that the >> kernel does not understand. I would look for a chcon in an init >>

Re: [CentOS] SELinux is preventing /usr/bin/chcon "mac_admin" access

2011-12-20 Thread James B. Byrne
On Tue, December 20, 2011 09:49, Daniel J Walsh wrote: > > This means somebody is executing a chcon with a context > that the kernel does not understand. I would look for a > chcon in an init script. I tried this and did not find any in the init scripts: find /etc/rc.d -print | xargs grep chc

Re: [CentOS] SELinux is preventing /usr/bin/chcon "mac_admin" access

2011-12-20 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/20/2011 02:44 PM, James B. Byrne wrote: > CentOS-6.1 KVM guest on CentOS-6.1 host. > > I am seeing this SEAlert in the /var/log/audit/audit.log file a new > guest immediately after startup. Can someone tell me what it means > and what I should d