LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Hardware
User Name
Password
Linux - Hardware This forum is for Hardware issues.
Having trouble installing a piece of hardware? Want to know if that peripheral is compatible with Linux?

Notices

Reply
 
Search this Thread
Old 12-13-2006, 08:39 PM   #1
Alias_NeO
LQ Newbie
 
Registered: Sep 2006
Posts: 8

Rep: Reputation: 0
Question Strange text in all terminal/virtual terminals/boot.


WHen i go into some form of terminal the virtual ones or if i exit x server this text comes up constantly and keeps scrolling down the screen in an extremely annoying way, stopping me from what I'm doing, any ideas what it is and how to get rid of it?

Code:
audit(1166062080.002:460): avc:  denied  { search } for  pid=3129 comm="irqbalance" name="net" dev=proc ino=4026531864 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=dir

Thanks
 
Old 12-15-2006, 05:21 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,132
Blog Entries: 54

Rep: Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791
any ideas what it is and how to get rid of it?
You are running a GNU/Linux release that runs "SELinux" (which is a good thing). These "audit" messages tell you something is wrong (that should and can be corrected). As with most things GNU/Linux there's more than one way:
- the easiest and most fault-tolerant way is to "touch /.autorelabel" as root account user and then reboot. At reboot the filesystem will be relabeled and these messages should not show again,
- the second way would be to run "fixfiles relabel" as root account user. Doing that you don't have to reboot, but you will find the process deletes all your files in /tmp which might cause unexpected results (slight understatement),
- finally you can run "audit2allow" on the log containing your audit messages and load the resulting rules. This you should never have to do in "default" situations and I wouldn't recommend it for you.

A word about the messages in your console. The fact you see those messages is good since you get to see them and have to chance to act on or ignore them (let's not). If the messages bother you and you do read the systems logs regularly, you can set "dmesg -n i" in your ~/.bashrc (i being a single digit, range 1-8 IIRC, usually "4" should do) to make them disappear from the screen. They still will be written to the logs.


//Please ask the moderator(s) of this forum to move this thread to the "Linux kernel" or "Linux general" or your distro's forum where it belongs, it's not a hardware issue.
 
Old 12-16-2006, 05:40 PM   #3
Alias_NeO
LQ Newbie
 
Registered: Sep 2006
Posts: 8

Original Poster
Rep: Reputation: 0
Ok, well i tried the first method "touch /.autorelabel", rebooted, and it relabelled, now i have more problems, i have a startup message that says something like "Starting System Message Bus, Unknown group 'netdev' in System....."

Also i get more of the terminal commands, funnily they all contain "net" or "dev" as "name='net'" or "name='dev'".

I will not try the second and third method yet but if you could give a suggestion, i have attached the exact dmesg output. Thanks



Quote:
audit(1166311677.001:4): avc: denied { search } for pid=2729 comm="irqbalance" name="net" dev=proc ino=4026531864 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=dir
audit(1166311677.001:5): avc: denied { read } for pid=2729 comm="irqbalance" name="dev" dev=proc ino=4026532138 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
audit(1166311677.001:6): avc: denied { getattr } for pid=2729 comm="irqbalance" name="dev" dev=proc ino=4026532138 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
audit(1166311677.001:7): avc: denied { create } for pid=2729 comm="irqbalance" scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:system_r:irqbalance_t:s0 tclass=udp_socket
audit(1166311677.001:8): avc: denied { ioctl } for pid=2729 comm="irqbalance" name="[12847]" dev=sockfs ino=12847 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:system_r:irqbalance_t:s0 tclass=udp_socket
audit(1166311677.001:9): avc: denied { net_admin } for pid=2729 comm="irqbalance" capability=12 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:system_r:irqbalance_t:s0 tclass=capability
audit(1166311680.382:10): avc: denied { getattr } for pid=3165 comm="hald" name="auto.misc" dev=dm-0 ino=60392261 scontext=system_u:system_r:hald_t:s0 tcontext=system_u:object_r:automount_etc_t:s0 tclass=file
audit(1166311687.001:11): avc: denied { search } for pid=2729 comm="irqbalance" name="net" dev=proc ino=4026531864 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=dir
audit(1166311687.001:12): avc: denied { read } for pid=2729 comm="irqbalance" name="dev" dev=proc ino=4026532138 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
audit(1166311687.001:13): avc: denied { getattr } for pid=2729 comm="irqbalance" name="dev" dev=proc ino=4026532138 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
audit(1166311727.001:14): avc: denied { search } for pid=2729 comm="irqbalance" name="net" dev=proc ino=4026531864 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=dir
audit(1166311727.001:15): avc: denied { read } for pid=2729 comm="irqbalance" name="dev" dev=proc ino=4026532138 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
audit(1166311727.001:16): avc: denied { getattr } for pid=2729 comm="irqbalance" name="dev" dev=proc ino=4026532138 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
Could this be to do with the fact i installed with noapic and removed that kernel param only after i found a BIOS upgrade would fix that problem? Would a fresh install help or is their an easier fix?

P.S. To the mods, any chance you guys could do as unSpawn suggests and move this to the Kernel(?) section? Thanks
 
Old 12-17-2006, 07:23 PM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,132
Blog Entries: 54

Rep: Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791
now i have more problems
Quite unexpected.


i have a startup message that says something like "Starting System Message Bus, Unknown group 'netdev' in System....."
Can you return the *exact* message? What does "getent passwd netdev" return? If nothing, any idea how it got deleted? Did you by any chance do some "tweaking"? Like removing accounts you though not necessary?


Could this be to do with the fact i installed with noapic and removed that kernel param only after i found a BIOS upgrade would fix that problem?
"Noapic" is a switch that influences how the kernel will treat APIC, I very much doubt it would influence SELinux behaviour.


Would a fresh install help or is their an easier fix?
Two ways: or "fixfiles relabel" or remove and reinstall Irqbalance and how that does the trick. "fixfiles relabel" *is* destructive in the sense it *completely* relabels the system, so better save /tmp contents you want to keep elsewhere and "telinit 1" (drop to runlevel 1) before you do. Removing and reinstalling Irqbalance "just doesn't seem right" in that you should not need to remove+reinstall apps to fix SELinux problems.


P.S. To the mods
Heh, no, that doesn't work. Report this thread using the "report" button under your OP and ask for a move.
 
Old 12-18-2006, 07:47 AM   #5
Alias_NeO
LQ Newbie
 
Registered: Sep 2006
Posts: 8

Original Poster
Rep: Reputation: 0
I'm back in doze due to a problem atm but, No, i didn't tweak anything, I just upgraded all my packages through the automatic upgrade thing, I also did a fresh install afterwards, the netdev seemed to be a group that was created in the message bus config file, i commented out the section to do with that group and i no longer see the boot message.

The exact message is:
Unknown group 'netdev' in message bus configuration file.

Some other people seem to have had the same problem and it is definitly due to an update: HERE

Some seem to have solved it by adding the group netdev ..... I however just commented it out of my message bus config file.

Probably not hte best solution but it works for the moment, I'm just trying to iron out half a dozen other problems before my sysem becomes useable.
 
Old 12-18-2006, 06:57 PM   #6
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,132
Blog Entries: 54

Rep: Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791
OK. Thanks for posting the link, spose that should help people and good luck with rescueing your system from the clutches of whatever has got a perfidious hold on it.
 
Old 12-19-2006, 03:26 PM   #7
sleeping
LQ Newbie
 
Registered: Dec 2004
Distribution: ArchLinux
Posts: 22

Rep: Reputation: 0
I'm gonna jump in the conversation to mention that I also experience the same problem under Fedora Core 6, with my terminals being filled with messages such as :

Quote:
audit(1166562355.001:33): avc: denied { search } for pid=2167 comm="irqbalance" name="net" dev=proc ino=-268435432 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_ubject_rroc_net_t:s0 tclass=dir
Doing "touch /.autorelabel" as root plus reboot didn't work. Doing "fixfiles relabel" as root didn't work. Uninstalling and reinstalling irqbalance didn't work.

I don't know enough about SELinux to find a better fix, so I'm simply gonna disable it for now (that's sad). Could it be that the default install of Fedora is broken on SMP processors?
 
Old 12-20-2006, 07:54 AM   #8
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,132
Blog Entries: 54

Rep: Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791
I don't think this has to do with UNI or SMP. Another way to realign the system would be to have "audit2allow" extract custom rules from your log containing avc errors and add those rules to your SELinux ruleset. FC has some nice docs using audit2allow IIGC.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Virtual Terminals in C++ Anno Programming 2 06-20-2006 01:26 AM
Virtual Terminal Strange Happenings shag Linux - General 2 12-23-2005 08:56 PM
Virtual Terminals ThoughtWielder Linux - Newbie 1 12-07-2005 04:23 PM
Virtual Terminals Kruncher Slackware 9 04-25-2005 06:19 AM
Virtual Terminals moger Linux - General 2 09-29-2002 10:34 PM


All times are GMT -5. The time now is 04:35 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration